USN-7501-1: Django vulnerability

USN-7501-1: Django vulnerability
7 May 2025

Django could be made to crash if it received specially crafted network traffic.

Releases

• Ubuntu 25.04
• Ubuntu 24.10
• Ubuntu 24.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 20.04 ESM

Packages
python-django - High-level Python web development framework

Details
Elias Myllymäki discovered that Django incorrectly handled stripping large
sequences of incomplete HTML tags. A remote attacker could possibly use
this issue to cause Django to consume resources, leading to a denial of
service.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 25.04

• python3-django - 3:4.2.18-1ubuntu1.1
  Ubuntu 24.10
• python3-django - 3:4.2.15-1ubuntu1.4
  Ubuntu 24.04
• python3-django - 3:4.2.11-1ubuntu1.7
  Ubuntu 22.04
• python3-django - 2:3.2.12-2ubuntu1.18
  Ubuntu 20.04
• python3-django - 2:2.2.12-1ubuntu0.29

In general, a standard system update will make all the necessary changes.