Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Ubuntu 25.04: Django Important SQL Injection Risk USN-7736-1 CVE-2025-57833

ubuntu
Calendar Grey September 4, 2025
Scroller Ubuntu
Significant SQL injection vulnerability found in Django affecting multiple Ubuntu distributions. Detailed upgrade instructions provided.
Django could be SQL injected if it received a suitably crafted dictionary.

Summary

Django could be SQL injected if it received a suitably

crafted dictionary.

Software Description:

- python-django: High-level Python web development framework

Details:

It was discovered that Django incorrectly handled certain inputs.

An attacker could possibly use this issue to perform a SQL injection.

Topics%20covered

Topics Covered

security advisory SQL Injection Ubuntu important update instructions python-django

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  python3-django                  3:4.2.18-1ubuntu1.4

Ubuntu 24.04 LTS
  python3-django                  3:4.2.11-1ubuntu1.10

Ubuntu 22.04 LTS
  python3-django                  2:3.2.12-2ubuntu1.21

Ubuntu 20.04 LTS
  python3-django                  2:2.2.12-1ubuntu0.29+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-7736-1

  CVE-2025-57833

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory SQL Injection Ubuntu important update instructions python-django

Package Information

 
https://launchpad.net/ubuntu/+source/python-django/3:4.2.18-1ubuntu1.4
 
https://launchpad.net/ubuntu/+source/python-django/3:4.2.11-1ubuntu1.10
 
https://launchpad.net/ubuntu/+source/python-django/2:3.2.12-2ubuntu1.21

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.