Stay Secure with the Latest Linux Advisories

security advisorydenial of servicesoftware update

Ubuntu 20.04 LTS: USN-4381-1 Critical: Django Denial Of Service

Several security issues were fixed in Django.. =========================================================================Ubuntu Security Notice USN-4381-1 June 03, 2020 python-django vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 19.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Django. Software Description: - python-django: High-level Python web development framework Details: Dan Palmer discovered that Django incorrectly validated memcached cache keys. A remote attacker could possibly use this issue to cause a denial of service and obtain sensitive information. (CVE-2020-13254) Jon Dufresne discovered that Django incorrectly encoded query parameters for the admin ForeignKeyRawIdWidget. A remote attacker could possibly use this issue to perform XSS attacks. (CVE-2020-13596) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: python3-django 2:2.2.12-1ubuntu0.1 Ubuntu 19.10: python-django 1:1.11.22-1ubuntu1.4 python3-django 1:1.11.22-1ubuntu1.4 Ubuntu 18.04 LTS: python-django 1:1.11.11-1ubuntu1.9 python3-django 1:1.11.11-1ubuntu1.9 Ubuntu 16.04 LTS: python-django 1.8.7-1ubuntu5.13 python3-django 1.8.7-1ubuntu5.13 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4381-1 CVE-2020-13254, CVE-2020-13596 Package Information: https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.1 https://launchpad.net/ubuntu/+source/python-django/1:1.11.22-1ubuntu1.4 https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.9 https://launchpad.net/ubuntu/+source/python-django/1.8.7-1ubuntu5.13 . Security patches for Python-Django issues resolved in Ubuntu, impacting multiple versions, comprehensive advisory and updates provided.. Python-Django Security, XSS Attack Prevention, Denial of Service Mitigation, Ubuntu Security Updates. . Severity: Critical. LinuxSecurity.com Team

Jun 03, 2020 •Critical Ubuntu