Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 495
Alerts This Week
Warning Icon 1 495

Ubuntu 20.04 LTS: USN-4742-1 High: Django Remote Access Risk

ubuntu
Calendar Grey February 22, 2021
Dist Ubuntu Esm H88
A vulnerability in Django allows for unauthorized entry, affecting Ubuntu's security architecture and potentially leading to Web Cache Poisoning incidents.
Django could allow unintended access to network services.

Summary

Django could allow unintended access to network services.

Software Description:

- python-django: High-level Python web development framework

Details:

It was discovered that Django incorrectly accepted semicolons as query

parameters. A remote attacker could possibly use this issue to perform a

Web Cache Poisoning attack.

Topics%20covered

Topics Covered

security advisory high severity ubuntu network access web cache poisoning web cache django

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  python3-django                  2:2.2.16-1ubuntu0.2

Ubuntu 20.04 LTS:
  python3-django                  2:2.2.12-1ubuntu0.4

Ubuntu 18.04 LTS:
  python-django                   1:1.11.11-1ubuntu1.11
  python3-django                  1:1.11.11-1ubuntu1.11

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4742-1

CVE-2021-23336

Severity
important
Lowest
Low
Medium
High
Critical

February 22, 2021

Topics%20covered

Topics Covered

security advisory high severity ubuntu network access web cache poisoning web cache django

Package Information

https://launchpad.net/ubuntu/+source/python-django/2:2.2.16-1ubuntu0.2
https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.4
https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.11

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.