Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 530
Alerts This Week
Warning Icon 1 530

Ubuntu 22.04 LTS USN-5653-1 Critical Django Denial of Service

ubuntu
Calendar Grey October 4, 2022
Dist Ubuntu Esm H88
Flawed management of routes by Django may result in failures due to specially designed network requests. Ensure your platform is updated for safety.
Django could be made to crash if it received specially crafted network traffic.

Summary

Django could be made to crash if it received specially crafted network

traffic.

Software Description:

- python-django: High-level Python web development framework

Details:

Benjamin Balder Bach discovered that Django incorrectly handled certain

internationalized URLs. A remote attacker could possibly use this issue to

cause Django to crash, resulting in a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu Django

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  python3-django                  2:3.2.12-2ubuntu1.3

Ubuntu 20.04 LTS:
  python3-django                  2:2.2.12-1ubuntu0.14

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5653-1

CVE-2022-41323

Severity
critical
Lowest
Low
Medium
High
Critical

October 04, 2022

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu Django

Package Information

https://launchpad.net/ubuntu/+source/python-django/2:3.2.12-2ubuntu1.3
https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.14

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.