Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

Ubuntu 19.10/18.04: USN-4264-1 Critical: Django SQL Injection

ubuntu
Calendar Grey February 4, 2020
Dist Ubuntu Esm H88
Recent security flaw in Django running on Ubuntu may facilitate SQL injection vulnerabilities; users are urged to apply updates for improved protection.
Django could be vulnerable to SQL injection attacks.

Summary

Django could be vulnerable to SQL injection attacks.

Software Description:

- python-django: High-level Python web development framework

Details:

Simon Charette discovered that Django incorrectly handled input in the

PostgreSQL module. A remote attacker could possibly use this to perform SQL

injection attacks.

Topics%20covered

Topics Covered

security advisory security issue remote attack Ubuntu SQL injection python-django Django

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  python-django                   1:1.11.22-1ubuntu1.2
  python3-django                  1:1.11.22-1ubuntu1.2

Ubuntu 18.04 LTS:
  python-django                   1:1.11.11-1ubuntu1.7
  python3-django                  1:1.11.11-1ubuntu1.7

In general, a standard system update will make all the necessary changes.

References

CVE-2020-7471

Severity
critical
Lowest
Low
Medium
High
Critical

February 04, 2020

Topics%20covered

Topics Covered

security advisory security issue remote attack Ubuntu SQL injection python-django Django

Package Information

https://launchpad.net/ubuntu/+source/python-django/1:1.11.22-1ubuntu1.2
https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here