Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

Ubuntu 22.04 LTS USN-5653-1 Critical Django Denial of Service

Ubuntu Large Esm H500
Django could be made to crash if it received specially crafted network traffic.
=========================================================================Ubuntu Security Notice USN-5653-1
October 04, 2022

python-django vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

Django could be made to crash if it received specially crafted network
traffic.

Software Description:
- python-django: High-level Python web development framework

Details:

Benjamin Balder Bach discovered that Django incorrectly handled certain
internationalized URLs. A remote attacker could possibly use this issue to
cause Django to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  python3-django                  2:3.2.12-2ubuntu1.3

Ubuntu 20.04 LTS:
  python3-django                  2:2.2.12-1ubuntu0.14

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5653-1
  CVE-2022-41323

Package Information:
  https://launchpad.net/ubuntu/+source/python-django/2:3.2.12-2ubuntu1.3
  https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.14

Ubuntu 22.04 LTS USN-5653-1 Critical Django Denial of Service

ubuntu
Calendar Grey October 4, 2022
Dist Ubuntu Esm H88
Flawed management of routes by Django may result in failures due to specially designed network requests. Ensure your platform is updated for safety.
Django could be made to crash if it received specially crafted network traffic.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: python3-django 2:3.2.12-2ubuntu1.3 Ubuntu 20.04 LTS: python3-django 2:2.2.12-1ubuntu0.14 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5653-1

CVE-2022-41323

Severity
critical
Lowest
Low
Medium
High
Critical

October 04, 2022

Package Information

https://launchpad.net/ubuntu/+source/python-django/2:3.2.12-2ubuntu1.3 https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.14

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here