Skip to content
OpenAdvisories
Medium · 6.1 CVE-2017-7233 EUVD-2017-0026GHSA-37hp-765x-j95xPYSEC-2017-9

Django open redirect and possible XSS attack via user-supplied numeric redirect URLs

Published Apr 4, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Package: django Package: py-django Package: py3-django Package: python-django Package: python-django Ecosystem: Alpine Ecosystem: Debian Ecosystem: PyPI Ecosystem: Ubuntu

Description

Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs "safe" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 python-django 1:1.10.7-1 —
Debian 13 python-django 1:1.10.7-1 —
Debian 12 python-django 1:1.10.7-1 —
Debian 8 python-django 1.7.11-1+deb8u2 DSA-3835-1
Debian 7 python-django 1.4.22-1+deb7u3 DLA-885-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS python-django 1.8.7-1ubuntu5.5 USN-3254-1
Ubuntu 14.04 LTS python-django 1.6.11-0ubuntu1.1 USN-3254-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Satellite Capsule 6 SOAPpy 0.11.6-17.el7 RHSA-2018:2927
Red Hat Satellite Capsule 6 ansiblerole-insights-client 1.5-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 createrepo_c +1 0.7.4-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 foreman +1 1.18.0.37-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 foreman-bootloaders-redhat +1 201801241201-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 foreman-installer 1:1.18.0.2-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 foreman-proxy +1 1.18.0.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 gofer +2 2.12.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 hfsplus-tools 332.14-12.el7 RHSA-2018:2927
Red Hat Satellite Capsule 6 katello +3 3.7.0-8.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 katello-certs-tools 2.4.0-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 katello-client-bootstrap 1.6.0-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 katello-installer-base +1 3.7.0.10-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 katello-selinux 3.0.3-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 kobo 0.5.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 libstemmer 0-2.585svn.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 libwebsockets 2.1.0-3.el7 RHSA-2018:2927
Red Hat Satellite Capsule 6 livecd-tools +1 1:20.4-1.6.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 mod_passenger +3 4.0.18-24.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 mod_xsendfile 0.12-10.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 mongodb +1 2.6.11-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 ostree 2017.1-2.atomic.el7 RHSA-2018:2927
Red Hat Satellite Capsule 6 pulp +14 2.16.4.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 pulp-docker +3 3.1.4.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 pulp-katello 1.0.2-5.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 pulp-ostree +4 1.3.0-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 pulp-puppet +3 2.16.4-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 pulp-rpm +4 2.16.4.1-5.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 puppet-agent 5.5.0-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 puppet-agent-oauth 0.5.1-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 puppet-foreman_scap_client 0.3.16-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 puppetlabs-stdlib 4.2.1-1.20140510git08b00d9.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 puppetserver 5.3.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-amqp +1 2.2.2-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-anyjson 0.3.3-5.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-billiard +1 1:3.5.0.3-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-blinker 1.3-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-bson +2 3.2-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-celery +1 4.0.2-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-crane 3.1.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-django +1 1.11.11-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-flask 1:0.10.1-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-fpconst 0.7.3-12.el7 RHSA-2018:2927
Red Hat Satellite Capsule 6 python-gnupg 0.3.7-1.el7ui RHSA-2018:2927
Red Hat Satellite Capsule 6 python-isodate 0.5.0-5.pulp.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-itsdangerous 0.23-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-jinja2 2.7.2-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-kid 0.9.6-11.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-kombu +1 1:4.0.2-8.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-mongoengine 0.10.5-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-nectar 1.5.6-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-oauth2 1.5.211-8.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-okaara 1.0.32-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-qpid 1.35.0-5.el7 RHSA-2018:2927
Red Hat Satellite Capsule 6 python-semantic_version 2.2.0-6.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-simplejson 3.2.0-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-twisted-core 12.2.0-4.el7 RHSA-2018:2927
Red Hat Satellite Capsule 6 python-twisted-web 12.1.0-5.el7_2 RHSA-2018:2927
Red Hat Satellite Capsule 6 python-vine +1 1.1.3-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-werkzeug 0.9.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 python-zope-interface 4.0.5-4.el7 RHSA-2018:2927
Red Hat Satellite Capsule 6 qpid-cpp +6 1.36.0-19.el7 RHSA-2018:2927
Red Hat Satellite Capsule 6 qpid-dispatch +2 0.8.0-19.el7 RHSA-2018:2927
Red Hat Satellite Capsule 6 qpid-proton +2 0.16.0-12.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 redhat-access-insights-puppet 0.0.9-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 repoview 0.6.6-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-ansi 1.4.3-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-bundler_ext +1 0.4.1-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-clamp +1 1.1.2-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-concurrent-ruby 1:1.0.3-6.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-fast_gettext 1.1.0-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-ffi 1.4.0-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-gssapi 1.1.2-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-hashie +1 2.0.5-5.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-highline +1 1.7.8-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-kafo 2.1.0-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-kafo_parsers 0.1.6-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-kafo_wizards 0.0.1-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-little-plugger +1 1.1.3-22.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-logging 2.2.2-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-mime-types 1.19-7.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-multi_json 1.12.2-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-netrc 0.7.7-9.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-newt 0.9.6-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-oauth +1 0.5.4-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-openscap 0.4.7-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-powerbar +1 1.0.17-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-rack 1:1.6.4-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-rack-protection 1.5.3-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-rake 0.9.2.2-41.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-rb-inotify 0.9.7-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-rest-client 1.6.7-7.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-rkerberos 0.1.3-5.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-rsec 0.4.2-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-rubyipmi 0.10.0-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-sinatra 1:1.4.7-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-smart_proxy_ansible 2.0.2-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-smart_proxy_dhcp_remote_isc 0.0.4-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-smart_proxy_discovery 1.0.4-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-smart_proxy_discovery_image 1.0.9-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-smart_proxy_dynflow +1 0.2.1-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-smart_proxy_openscap 0.6.11-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-smart_proxy_remote_execution_ssh 0.2.0-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 rubygem-tilt 1.3.7-2.git.0.3b416c9.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 saslwrapper +1 0.22-5.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 satellite +3 6.4.0-15.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 satellite-installer 6.4.0.7-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm +1 4.0-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-ror51 +1 1.1-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-ror51-rubygem-concurrent-ruby +1 1.0.5-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-ror51-rubygem-mime-types 3.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-ror51-rubygem-mime-types-data 3.2016.0521-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-ror51-rubygem-multi_json 1.12.2-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-ror51-rubygem-mustermann 1.0.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-ror51-rubygem-rack 2.0.3-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-ror51-rubygem-sinatra +1 2.0.0-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-ror51-rubygem-sqlite3 1.3.13-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-ror51-rubygem-tilt 2.0.8-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-algebrick 0.7.3-5.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-apipie-bindings 0.2.2-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-apipie-params 0.0.5-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-awesome_print 1.8.0-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-concurrent-ruby-edge 1:0.2.4-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-domain_name 0.5.20160310-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-dynflow 1.0.5.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-fast_gettext 1.4.1-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-ffi 1.4.0-11.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-foreman-tasks-core 0.2.5-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-foreman_ansible_core 2.1.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-foreman_remote_execution_core 1.1.3-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-gssapi 1.2.0-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-hammer_cli 0.13.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-hammer_cli_foreman_bootdisk 0.1.3.3-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-hammer_cli_foreman_docker 0.0.6-3.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-hammer_cli_foreman_tasks 0.0.12-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-http-cookie 1.0.2-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-locale 2.0.9-12.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-logging 2.2.2-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-net-ssh 4.0.1-4.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-net-ssh-krb 0.4.0-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-netrc 0.11.0-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-rest-client 2.0.1-2.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-sequel 5.7.1-1.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-unf 0.1.3-6.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-unf_ext 0.0.6-8.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 tfm-rubygem-unicode 0.4.4.1-5.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 v8 1:3.14.5.10-19.el7sat RHSA-2018:2927
Red Hat Satellite Capsule 6 yaml-cpp 0.5.1-7.el7sat RHSA-2018:2927
Red Hat Satellite 6 SOAPpy 0.11.6-17.el7 RHSA-2018:2927
Red Hat Satellite 6 ansiblerole-insights-client 1.5-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 candlepin +1 2.4.8-1.el7 RHSA-2018:2927
Red Hat Satellite 6 createrepo_c +1 0.7.4-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 foreman +13 1.18.0.37-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 foreman-bootloaders-redhat +1 201801241201-3.el7sat RHSA-2018:2927
Red Hat Satellite 6 foreman-installer 1:1.18.0.2-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 foreman-proxy +1 1.18.0.1-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 gofer +2 2.12.1-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 hfsplus-tools 332.14-12.el7 RHSA-2018:2927
Red Hat Satellite 6 katello +4 3.7.0-8.el7sat RHSA-2018:2927
Red Hat Satellite 6 katello-certs-tools 2.4.0-2.el7sat RHSA-2018:2927
Red Hat Satellite 6 katello-client-bootstrap 1.6.0-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 katello-installer-base +1 3.7.0.10-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 katello-selinux 3.0.3-2.el7sat RHSA-2018:2927
Red Hat Satellite 6 kobo 0.5.1-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 libwebsockets 2.1.0-3.el7 RHSA-2018:2927
Red Hat Satellite 6 liquibase 3.1.0-1.el7 RHSA-2018:2927
Red Hat Satellite 6 livecd-tools +1 1:20.4-1.6.el7sat RHSA-2018:2927
Red Hat Satellite 6 mod_passenger 4.0.18-24.el7sat RHSA-2018:2927
Red Hat Satellite 6 mod_xsendfile 0.12-10.el7sat RHSA-2018:2927
Red Hat Satellite 6 ostree 2017.1-2.atomic.el7 RHSA-2018:2927
Red Hat Satellite 6 pcp-mmvstatsd 0.4-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 pulp +10 2.16.4.1-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 pulp-docker +3 3.1.4.1-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 pulp-katello 1.0.2-5.el7sat RHSA-2018:2927
Red Hat Satellite 6 pulp-ostree +3 1.3.0-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 pulp-puppet +4 2.16.4-3.el7sat RHSA-2018:2927
Red Hat Satellite 6 pulp-rpm +4 2.16.4.1-5.el7sat RHSA-2018:2927
Red Hat Satellite 6 puppet-agent 5.5.0-2.el7sat RHSA-2018:2927
Red Hat Satellite 6 puppet-agent-oauth 0.5.1-3.el7sat RHSA-2018:2927
Red Hat Satellite 6 puppet-foreman_scap_client 0.3.16-3.el7sat RHSA-2018:2927
Red Hat Satellite 6 puppetlabs-stdlib 4.2.1-1.20140510git08b00d9.el7sat RHSA-2018:2927
Red Hat Satellite 6 puppetserver 5.3.1-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-amqp +1 2.2.2-3.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-anyjson 0.3.3-5.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-billiard +1 1:3.5.0.3-3.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-blinker 1.3-2.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-bson +2 3.2-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-celery +1 4.0.2-4.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-crane 3.1.1-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-django +1 1.11.11-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-flask 1:0.10.1-4.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-fpconst 0.7.3-12.el7 RHSA-2018:2927
Red Hat Satellite 6 python-gnupg 0.3.7-1.el7ui RHSA-2018:2927
Red Hat Satellite 6 python-isodate 0.5.0-5.pulp.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-itsdangerous 0.23-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-jinja2 2.7.2-2.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-kid 0.9.6-11.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-kombu +1 1:4.0.2-8.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-mongoengine 0.10.5-2.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-nectar 1.5.6-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-oauth2 1.5.211-8.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-okaara 1.0.32-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-qpid 1.35.0-5.el7 RHSA-2018:2927
Red Hat Satellite 6 python-saslwrapper 0.22-5.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-semantic_version 2.2.0-6.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-simplejson 3.2.0-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-twisted-core 12.2.0-4.el7 RHSA-2018:2927
Red Hat Satellite 6 python-twisted-web 12.1.0-5.el7_2 RHSA-2018:2927
Red Hat Satellite 6 python-vine +1 1.1.3-4.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-werkzeug 0.9.1-1.el7sat RHSA-2018:2927
Red Hat Satellite 6 python-zope-interface 4.0.5-4.el7 RHSA-2018:2927
Red Hat Satellite 6 qpid-cpp +7 1.36.0-19.el7 RHSA-2018:2927
Red Hat Satellite 6 qpid-dispatch +2 0.8.0-19.el7 RHSA-2018:2927
Red Hat Satellite 6 qpid-proton +2 0.16.0-12.el7sat RHSA-2018:2927
Red Hat Satellite 6 redhat-access-insights-puppet 0.0.9-3.el7sat RHSA-2018:2927
Red Hat Satellite 6 repoview 0.6.6-4.el7sat RHSA-2018:2927
Red Hat OpenStack 11 python-django +1 1.8.18-1.el7ost RHSA-2017:3093
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat OpenStack 10 python-django +1 1.8.18-1.el7ost RHSA-2017:1596
Red Hat OpenStack 9 python-django +1 1.8.18-1.el7ost RHSA-2017:1462
Red Hat OpenStack 8 python-django +1 1.8.18-1.el7ost RHSA-2017:1470
Red Hat OpenStack 7 python-django +2 1.8.18-1.el7ost RHSA-2017:1451
Red Hat OpenStack 6 python-django +2 1.6.11-7.el7ost RHSA-2017:1445

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Package Hub 12 SP1 python-Django 1.11.15-2.1 openSUSE-SU-2023:0077-1
SUSE Package Hub 12 python-Django 1.11.10-5.1 openSUSE-SU-2018:0632-1
SUSE OpenStack Cloud 7 python-Django 1.8.19-3.4.1 SUSE-SU-2018:0973-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE OpenStack Cloud 6 python-Django 1.8.19-3.6.1 SUSE-SU-2018:1102-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-Django 3.2.7-2.3 openSUSE-SU-2026:11248-1, openSUSE-SU-2024:13887-1, openSUSE-SU-2024:11205-1
openSUSE Tumbleweed python-Django4 4.2.14-1.1 openSUSE-SU-2026:11235-1, openSUSE-SU-2024:14208-1
openSUSE Tumbleweed python-Django5 5.2.16-1.1 openSUSE-SU-2026:11270-1
openSUSE Tumbleweed python-Django6 6.0-1.1 openSUSE-SU-2026:10005-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 py3-django 1.10.7-r0 —
Alpine v3.23 py3-django 1.10.7-r0 —
Alpine v3.22 py3-django 1.10.7-r0 —
Alpine v3.21 py3-django 1.10.7-r0 —
Alpine v3.20 py3-django 1.10.7-r0 —
Show 18 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 py3-django 1.10.7-r0 —
Alpine v3.18 py3-django 1.10.7-r0 —
Alpine v3.17 py3-django 1.10.7-r0 —
Alpine v3.16 py3-django 1.10.7-r0 —
Alpine v3.15 py3-django 1.10.7-r0 —
Alpine v3.14 py3-django 1.10.7-r0 —
Alpine v3.13 py3-django 1.10.7-r0 —
Alpine v3.12 py3-django 1.10.7-r0 —
Alpine v3.11 py3-django 1.10.7-r0 —
Alpine v3.10 py-django 1.10.7-r0 —
Alpine v3.9 py-django 1.10.7-r0 —
Alpine v3.8 py-django 1.10.7-r0 —
Alpine v3.7 py-django 1.10.7-r0 —
Alpine v3.6 py-django 1.10.7-r0 —
Alpine v3.5 py-django 1.8.18-r0 —
Alpine v3.4 py-django 1.8.18-r0 —
Alpine v3.3 py-django 1.8.18-r0 —
Alpine v3.2 py-django 1.8.18-r0 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI django >= 1.10a1, < 1.10.7 1.10.7 GHSA-37hp-765x-j95x
PyPI django >= 1.9a1, < 1.9.13 1.9.13 GHSA-37hp-765x-j95x
PyPI django >= 1.8a1, < 1.8.18 1.8.18 GHSA-37hp-765x-j95x
PyPI django >= 1.10, < 1.10.7 · >= 1.9, < 1.9.13 · >= 1.8, < 1.8.18 1.10.7, 1.9.13, 1.8.18 PYSEC-2017-9

Advisories 21

References