Ubuntu 6054-2: Django vulnerability

Posted on by

Ubuntu 6054-2: Django vulnerability

==========================================================================
Ubuntu Security Notice USN-6054-2
May 25, 2023 python-django vulnerability
========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS (Available with Ubuntu Pro)
- Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: A Django hardening measure could be bypassed. Software Description:
- python-django: High-level Python web development framework Details: USN-6054-1 fixed a vulnerability in Django. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details:  Moataz Al-Sharida and nawaik discovered that Django incorrectly handled
 uploading multiple files using one form field. A remote attacker could
 possibly use this issue to bypass certain validations. Update instructions: The problem can be corrected by updating your system to the following
package versions: Ubuntu 16.04 LTS (Available with Ubuntu Pro): python-django 1.8.7-1ubuntu5.15+esm7 python-django-doc 1.8.7-1ubuntu5.15+esm7 python3-django 1.8.7-1ubuntu5.15+esm7 Ubuntu 14.04 LTS (Available with Ubuntu Pro): python-django 1.6.11-0ubuntu1.3+esm6 python-django-doc 1.6.11-0ubuntu1.3+esm6 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6054-2 https://ubuntu.com/security/notices/USN-6054-1 CVE-2023-31047

https://linuxsecurity.com/advisories/ubuntu/ubuntu-6054-2-django-vulnerability-nzer8ztrnsmd