==========================================================================
Ubuntu Security Notice USN-3591-1
March 06, 2018

python-django vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 17.10
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in Django.

Software Description:
– python-django: High-level Python web development framework

Details:

James Davis discovered that Django incorrectly handled certain template
filters. A remote attacker could possibly use this issue to cause Django
to consume resources, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.10:
python-django 1:1.11.4-1ubuntu1.2
python3-django 1:1.11.4-1ubuntu1.2

Ubuntu 16.04 LTS:
python-django 1.8.7-1ubuntu5.6
python3-django 1.8.7-1ubuntu5.6

Ubuntu 14.04 LTS:
python-django 1.6.11-0ubuntu1.2

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/usn/usn-3591-1
CVE-2018-7536, CVE-2018-7537

Package Information:
https://launchpad.net/ubuntu/+source/python-django/1:1.11.4-1ubuntu1.2
https://launchpad.net/ubuntu/+source/python-django/1.8.7-1ubuntu5.6
https://launchpad.net/ubuntu/+source/python-django/1.6.11-0ubuntu1.2

—–BEGIN PGP SIGNATURE—–
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=o+he
—–END PGP SIGNATURE—–
—