Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Ubuntu 4043-1: Discovering Critical Attack Vectors in Django Framework

ubuntu
Calendar Grey July 1, 2019
Dist Ubuntu Esm H88
Security vulnerabilities identified in Python Django highlighted in Ubuntu USN-4043-1 notice. Urgent patches advised.
Several security issues were fixed in Django.

Summary

Topics%20covered

Topics Covered

security advisory software update arbitrary code execution ubuntu python-django web framework credentials bypass

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: python-django 1:1.11.20-1ubuntu0.1 python3-django 1:1.11.20-1ubuntu0.1 Ubuntu 18.10: python-django 1:1.11.15-1ubuntu1.3 python3-django 1:1.11.15-1ubuntu1.3 Ubuntu 18.04 LTS: python-django 1:1.11.11-1ubuntu1.4 python3-django 1:1.11.11-1ubuntu1.4 Ubuntu 16.04 LTS: python-django 1.8.7-1ubuntu5.9 python3-django 1.8.7-1ubuntu5.9 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4043-1

CVE-2019-12308, CVE-2019-12781

Severity
critical
Lowest
Low
Medium
High
Critical

July 01, 2019

Topics%20covered

Topics Covered

security advisory software update arbitrary code execution ubuntu python-django web framework credentials bypass

Package Information

https://launchpad.net/ubuntu/+source/python-django/1:1.11.20-1ubuntu0.1 https://launchpad.net/ubuntu/+source/python-django/1:1.11.15-1ubuntu1.3 https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.4 https://launchpad.net/ubuntu/+source/python-django/1.8.7-1ubuntu5.9

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here