Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 18.04 LTS USN-6414-2 Critical Advisory: Django DoS Threat

ubuntu
Calendar Grey October 4, 2023
Dist Ubuntu Esm H88
Important security flaws in Django addressed in Ubuntu 20.04 as per USN-7548-3 notification. Ensure your installations are updated for better protection.
Several security issues were fixed in Django.

Summary

Several security issues were fixed in Django.

Software Description:

- python-django: High-level Python web development framework

Details:

USN-6414-1 and USN-6378-1 fixed CVE-2023-43665 and CVE-2023-41164 in Django,

respectively. This update provides the corresponding update for Ubuntu 18.04 LTS.

Original advisory details:

Wenchao Li discovered that the Django Truncator function incorrectly

handled very long HTML input. A remote attacker could possibly use this

issue to cause Django to consume resources, leading to a denial of service.

It was discovered that Django incorrectly handled certain URIs with a very

large number of Unicode characters. A remote attacker could possibly use

this issue to cause Django to consume resources or crash, leading to a

denial of service.

Topics%20covered

Topics Covered

security advisory denial of service update critical software issue ubuntu django

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
  python3-django                  1:1.11.11-1ubuntu1.21+esm2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6414-2

https://ubuntu.com/security/notices/USN-6414-1

CVE-2023-41164, CVE-2023-43665

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6414-2

Topics%20covered

Topics Covered

security advisory denial of service update critical software issue ubuntu django

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here