Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 14.04 ESM: USN-4715-2 Critical: Django File Overwrite Risk

ubuntu
Calendar Grey February 1, 2021
Dist Ubuntu Esm H88
Django may permit file overwrites, posing a risk to Ubuntu 14.04 ESM. Please ensure your system is updated to address this vulnerability immediately.
Django could be made to overwrite files.

Summary

Django could be made to overwrite files.

Software Description:

- python-django: High-level Python web development framework

Details:

USN-4715-1 fixed a vulnerability in Django. This update provides

the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Wang Baohua discovered that Django incorrectly extracted archive files. A

remote attacker could possibly use this issue to extract files outside of

their expected location.

Topics%20covered

Topics Covered

security advisory remote exploit critical file overwrite remote attack ubuntu python-django django

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  python-django                   1.6.11-0ubuntu1.3+esm2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4715-2

https://ubuntu.com/security/notices/USN-4715-1

CVE-2021-3281

Severity
critical
Lowest
Low
Medium
High
Critical

February 01, 2021

Topics%20covered

Topics Covered

security advisory remote exploit critical file overwrite remote attack ubuntu python-django django

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.