USN-7205-1: Django vulnerability

USN-7205-1: Django vulnerability
14 January 2025

Django could be made to cause a denial of service if it received a specially crafted IPv6 string.

Releases
Ubuntu 24.10 Ubuntu 24.04 LTS Ubuntu 22.04 LTS Ubuntu 20.04 LTS

Packages
python-django - High-level Python web development framework

Details
It was discovered that Django incorrectly handled certain IPv6
strings. An attacker could possibly use this issue to cause a
denial of service.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.10

• python3-django - 3:4.2.15-1ubuntu1.2
  Ubuntu 24.04
• python3-django - 3:4.2.11-1ubuntu1.5
  Ubuntu 22.04
• python3-django - 2:3.2.12-2ubuntu1.16
  Ubuntu 20.04
• python3-django - 2:2.2.12-1ubuntu0.27

In general, a standard system update will make all the necessary changes.