[SECURITY] [DLA 1303-1] python-django security update

🗓️ 08 Mar 2018 07:55:39Reported by DebianType

debian

debian🔗 lists.debian.org👁 43 Views

python-django security update addressing catastrophic backtracking vulnerabilitie

Reporter	Title	Published	Views	Family All 120
ALT Linux	Security fix for the ALT Linux 9 package python3-module-django version 2.2.3-alt1	15 Jul 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package python3-module-django version 2.2.3-alt1	15 Jul 201900:00	–	altlinux
AlpineLinux	CVE-2018-7536	9 Mar 201800:00	–	alpinelinux
AlpineLinux	CVE-2018-7537	9 Mar 201820:00	–	alpinelinux
ArchLinux	[ASA-201803-5] python-django: denial of service	6 Mar 201800:00	–	archlinux
ArchLinux	[ASA-201803-6] python2-django: denial of service	6 Mar 201800:00	–	archlinux
BDU FSTEC	The vulnerability of the django.utils.html.urlize function, as well as the chars and words methods of the django.utils.text.Truncator object in the Django web application framework, allows attackers to trigger a denial-of-service attack.	18 Dec 201800:00	–	bdu_fstec
CNVD	Django django.utils.html.urlize() Denial of Service Vulnerability	14 Mar 201800:00	–	cnvd
CNVD	Django Denial of Service Vulnerability (CNVD-2018-06064)	14 Mar 201800:00	–	cnvd
CVE	CVE-2018-7536	9 Mar 201800:00	–	cve

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	7	any	python-django	1.4.22-1+deb7u4	python-django_1.4.22-1+deb7u4_any.deb
Debian	7	any	python-django-doc	1.4.22-1+deb7u4	python-django-doc_1.4.22-1+deb7u4_any.deb

08 Mar 2018 07:55Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25

CVSS 35.3

EPSS0.04603

python-django security update catastrophic backtracking