Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Ubuntu 25.04 USN-7555-2 important: python-django log injection

ubuntu
Calendar Grey June 16, 2025
Dist Ubuntu Esm H88
Addressing the log injection vulnerability in Django on Ubuntu: urgent measures required for robust web security. Upgrade immediately!
Django could be made to log injection if received specially crafted input.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.04 - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Django could be made to log injection if received specially crafted input. Software Description: - python-django: High-level Python web development framework Details: USN-7555-1 fixed vulnerabilities in Django. The fix was incomplete. This update applies an additional patch to fix it properly. Original advisory details: It was discovered that Django incorrectly handled certain unescaped request paths. An attacker could possibly use this issue to perform a log injection.

Topics%20covered

Topics Covered

security advisory important ubuntu injection python-django logging

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 25.04 python3-django 3:4.2.18-1ubuntu1.3 Ubuntu 24.10 python3-django 3:4.2.15-1ubuntu1.6 Ubuntu 24.04 LTS python3-django 3:4.2.11-1ubuntu1.9 Ubuntu 22.04 LTS python3-django 2:3.2.12-2ubuntu1.20 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7555-2

https://ubuntu.com/security/notices/USN-7555-1

https://bugs.launchpad.net/ubuntu/+source/python-django/+bug/2113924

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7555-2

Topics%20covered

Topics Covered

security advisory important ubuntu injection python-django logging

Package Information

https://launchpad.net/ubuntu/+source/python-django/3:4.2.18-1ubuntu1.3 https://launchpad.net/ubuntu/+source/python-django/3:4.2.15-1ubuntu1.6 https://launchpad.net/ubuntu/+source/python-django/3:4.2.11-1ubuntu1.9 https://launchpad.net/ubuntu/+source/python-django/2:3.2.12-2ubuntu1.20

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here