RHSA-2022:5738: Important: Django 3.2.14 Security Update
Red Hat Update Infrastructure (RHUI) offers a highly scalable, highly redundant framework that enables you to manage repositories and content. It also enables cloud providers to deliver content and updates to Red Hat Enterprise Linux (RHEL) instances.Security Fix: Django: Potential SQL injection via Trunc(kind) and Extract(lookupname) arguments (CVE-2022-34265) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage(s) listed in the References section.Users of RHUI are advised to upgrade to this updated package that fixesthis bug.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:5738?
The severity of RHSA-2022:5738 is classified as important.
How do I fix RHSA-2022:5738?
To fix RHSA-2022:5738, upgrade to the patched version of python-django or python38-django as specified in the advisory.
Which versions of python-django are affected by RHSA-2022:5738?
Versions of python-django up to and including 3.2.14-3.el8 are affected by RHSA-2022:5738.
Is RHSA-2022:5738 applicable to cloud providers using Red Hat?
Yes, RHSA-2022:5738 is relevant for cloud providers that use Red Hat Update Infrastructure to manage RHEL instances.
What is the main topic addressed by RHSA-2022:5738?
RHSA-2022:5738 addresses a security vulnerability in Django that affects certain package versions in Red Hat Enterprise Linux.