USN-3559-1: Django vulnerabilities
Published Feb 7, 2018
·Updated
It was discovered that Django incorrectly handled certain requests. An attacker could possibly use this to access sensitive information. (CVE-2017-12794, CVE-2018-6188)
Affected Software
1 affected component
pypi/django
Event History
Feb 19, 2026
Advisory Published
via Ubuntu·08:37 PM
Data Sourced
via Ubuntu·08:37 PM
DescriptionAffected Software
Frequently Asked Questions
1
What vulnerabilities are addressed in USN-3559-1?
The vulnerabilities addressed in USN-3559-1 are CVE-2017-12794 and CVE-2018-6188.
2
How can an attacker exploit these vulnerabilities?
An attacker could exploit these vulnerabilities to access sensitive information.
3
What is the affected software?
The affected software is python3-django version up to 1.11.4-1ubuntu1.1 on Ubuntu 17.10.
4
How can I fix these vulnerabilities?
To fix these vulnerabilities, update python3-django to version 1.11.4-1ubuntu1.1 or later on Ubuntu 17.10.
5
Where can I find more information about these vulnerabilities?
More information about these vulnerabilities can be found at the following references: [CVE-2017-12794](https://ubuntu.com/security/CVE-2017-12794) and [CVE-2018-6188](https://ubuntu.com/security/CVE-2018-6188).