Ubuntu 14.04 LTS, Ubuntu 12.04 LTS and Ubuntu 10.04 LTS have received updates to address some "Django" vulnerabilities that were discovered.
The Django exploits affect all supported Ubuntu and are responsible for several security issues. The update is available for all users of these systems.
“Collin Anderson discovered that Django incorrectly checks whether a field represents a relationship between models in the admin interface. A remotely authenticated user could exploit this vulnerability to obtain potentially sensitive information.”.
Additionally, “David Wilson discovered that Django incorrectly handles file name generation. A remote attacker could exploit this vulnerability to cause Django to consume significant resources, resulting in a denial of service (DoS).”
These are just some of the issues that have been identified and fixed in Ubuntu.
For a more detailed description of the vulnerabilities, you can see Canonical 's security advisory . Users have been notified and are urged to update their systems as soon as possible.
