It's a good idea to upgrade as soon as possible

Jul 13, 2015 14:52 GMT  ·  By

Canonical has published details regarding two vulnerabilities that have been identified and fixed in Ubuntu 15.04 (Vivid Vervet), Ubuntu 14.10, Ubuntu 14.04 LTS, and Ubuntu 12.04 LTS.

This is not the first update for the Django packages during this development cycle, but it's not a major problem. Nonetheless, updating the operating system might be a good idea, especially if you haven't done it in a long time.

"Sjoerd Job Postmus discovered that Django incorrectly handled newline characters when performing validation. A remote attacker could use this issue to perform header injection attacks. Also, Eric Peterson and Lin Hua Cheng discovered that Django incorrectly handled session records. A remote attacker could use this issue to cause a denial of service," reads the security notice.

For a more detailed description of the problems, you can see Canonical's security notification. The problem can be corrected if you upgrade your system(s) to the latest python3-django and python-django packages. To apply the patch, you can simply run the Update Manager application, but you can also use the terminal.

Open a terminal and enter the following commands (you will need to be root and you will need Internet access):

code
sudo apt-get update
sudo apt-get dist-upgrade
A standard system update will make all the necessary changes. A complete reboot of the OS is not required.