Wang Baohua discovered that Django incorrectly extracted archive files. A remote attacker could possibly use this issue to extract files outside of their expected location.
{ "availability": "No subscription required", "binaries": [ { "python-django-common": "1.8.7-1ubuntu5.14", "python-django-doc": "1.8.7-1ubuntu5.14", "python-django": "1.8.7-1ubuntu5.14", "python3-django": "1.8.7-1ubuntu5.14" } ] }
{ "availability": "No subscription required", "binaries": [ { "python-django-common": "1:1.11.11-1ubuntu1.10", "python-django-doc": "1:1.11.11-1ubuntu1.10", "python-django": "1:1.11.11-1ubuntu1.10", "python3-django": "1:1.11.11-1ubuntu1.10" } ] }
{ "availability": "No subscription required", "binaries": [ { "python-django-doc": "2:2.2.12-1ubuntu0.3", "python3-django": "2:2.2.12-1ubuntu0.3" } ] }