USN-5549-1

It was discovered that Django incorrectly handled certain FileResponse. An attacker could possibly use this issue to expose sensitive information or gain access over user machine.

References

Affected packages

Ubuntu:20.04:LTS / python-django

Package

Name: python-django
Purl: pkg:deb/ubuntu/python-django@2:2.2.12-1ubuntu0.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:2.2.12-1ubuntu0.13

Affected versions

1:1.*

1:1.11.22-1ubuntu1

2:2.*

2:2.2.6-1ubuntu1

2:2.2.9-2ubuntu1

2:2.2.10-1

2:2.2.10-1ubuntu1

2:2.2.11-1

2:2.2.12-1

2:2.2.12-1ubuntu0.1

2:2.2.12-1ubuntu0.2

2:2.2.12-1ubuntu0.3

2:2.2.12-1ubuntu0.4

2:2.2.12-1ubuntu0.5

2:2.2.12-1ubuntu0.6

2:2.2.12-1ubuntu0.7

2:2.2.12-1ubuntu0.8

2:2.2.12-1ubuntu0.9

2:2.2.12-1ubuntu0.10

2:2.2.12-1ubuntu0.11

2:2.2.12-1ubuntu0.12

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "2:2.2.12-1ubuntu0.13",
            "binary_name": "python-django-doc"
        },
        {
            "binary_version": "2:2.2.12-1ubuntu0.13",
            "binary_name": "python3-django"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:22.04:LTS / python-django

Package

Name: python-django
Purl: pkg:deb/ubuntu/python-django@2:3.2.12-2ubuntu1.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:3.2.12-2ubuntu1.2

Affected versions

2:2.*

2:2.2.24-1ubuntu1

2:3.*

2:3.2.12-2

2:3.2.12-2ubuntu1

2:3.2.12-2ubuntu1.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "2:3.2.12-2ubuntu1.2",
            "binary_name": "python-django-doc"
        },
        {
            "binary_version": "2:3.2.12-2ubuntu1.2",
            "binary_name": "python3-django"
        }
    ],
    "availability": "No subscription required"
}