=========================================================================Ubuntu Security Notice USN-5653-1
October 04, 2022

python-django vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

Django could be made to crash if it received specially crafted network
traffic.

Software Description:
- python-django: High-level Python web development framework

Details:

Benjamin Balder Bach discovered that Django incorrectly handled certain
internationalized URLs. A remote attacker could possibly use this issue to
cause Django to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  python3-django                  2:3.2.12-2ubuntu1.3

Ubuntu 20.04 LTS:
  python3-django                  2:2.2.12-1ubuntu0.14

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5653-1
  CVE-2022-41323

Package Information:
  https://launchpad.net/ubuntu/+source/python-django/2:3.2.12-2ubuntu1.3
  https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.14

Ubuntu 5653-1: Django vulnerability

October 4, 2022
Django could be made to crash if it received specially crafted network traffic.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: python3-django 2:3.2.12-2ubuntu1.3 Ubuntu 20.04 LTS: python3-django 2:2.2.12-1ubuntu0.14 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5653-1

CVE-2022-41323

Severity
October 04, 2022

Package Information

https://launchpad.net/ubuntu/+source/python-django/2:3.2.12-2ubuntu1.3 https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.14

Related News