Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Ubuntu 16.04 ESM USN-4932-2 Critical: Django File Overwrite Issue

ubuntu
Calendar Grey May 13, 2021
Dist Ubuntu Esm H88
An identified vulnerability in Django on Ubuntu might enable remote attackers to overwrite files. Ensure you apply updates to reduce potential threats.
Django could be made to overwrite files.

Summary

Django could be made to overwrite files.

Software Description:

- python-django: High-level Python web development framework

Details:

USN-4932-1 fixed a vulnerability in Django. This update provides

the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that Django incorrectly handled certain

filenames. A remote attacker could possibly use this issue to create or

overwrite files in unexpected directories.

Topics%20covered

Topics Covered

security advisory high severity critical file overwrite remote attack Ubuntu ubuntu python-django Django

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  python-django                   1.8.7-1ubuntu5.15+esm1
  python3-django                  1.8.7-1ubuntu5.15+esm1

Ubuntu 14.04 ESM:
  python-django                   1.6.11-0ubuntu1.3+esm3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4932-2

https://ubuntu.com/security/notices/USN-4932-1

CVE-2021-31542

Severity
critical
Lowest
Low
Medium
High
Critical

May 13, 2021

Topics%20covered

Topics Covered

security advisory high severity critical file overwrite remote attack Ubuntu ubuntu python-django Django

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here