USN-4264-1: Django vulnerability
4 February 2020
Django could be vulnerable to SQL injection attacks.
Releases
Packages
- python-django - High-level Python web development framework
Details
Simon Charette discovered that Django incorrectly handled input in the
PostgreSQL module. A remote attacker could possibly use this to perform SQL
injection attacks.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 19.10
Ubuntu 18.04
In general, a standard system update will make all the necessary changes.