Skip to content
OpenAdvisories
Medium RHSA-2019:0082 1 CVE

Red Hat Security Advisory: python-django security update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 python-django 0:1.11.11-1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-django-bash-completion 0:1.11.11-1.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python2-django 0:1.11.11-1.el7ost

Vulnerabilities 1

  • Medium 5.3
    CVE-2018-7536

    Django denial-of-service possibility in urlize and urlizetrunc template filters

    An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions (…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549777
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0082.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-7536
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-7536
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-7536
  • article
    https://www.djangoproject.com/weblog/2018/mar/06/security-releases/