Back Linuxsecurity

Ubuntu 25.10 Django Critical Denial Of Service Issues USN-8154

Linuxsecurity •LinuxSecurity Advisories • April 7, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in Django. Software Description: - python-django: High-level Python web development framework Details: Seokchan Yoon discovered that Django incorrectly handled copying memory when parsing multipart uploads with excessive whitespace. A remote attacker could possibly use this issue to cause Django to use excessive resources, leading to a denial of service. (CVE-2026-33033) It was discovered that Django did not enforce an upload memory size limit in the Content-Length header. A remote attacker could possibly use this issue to cause Django to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-33034) Tarek Nakkouch discovered that Django incorrectly handled underscores in

The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 python3-django 3:5.2.4-1ubuntu2.4 Ubuntu 24.04 LTS python3-django 3:4.2.11-1ubuntu1.15 Ubuntu 22.04 LTS python3-django 2:3.2.12-2ubuntu1.26 Ubuntu 20.04 LTS python3-django 2:2.2.12-1ubuntu0.29+esm8 Available with Ubuntu Pro Ubuntu 18.04 LTS python-django 1:1.11.11-1ubuntu1.21+esm15 Available with Ubuntu Pro python3-django 1:1.11.11-1ubuntu1.21+esm15 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2026-33033, CVE-2026-33034, CVE-2026-3902, CVE-2026-4277, CVE-2026-4292

CVE-2026-33033, CVE-2026-33034, CVE-2026-3902, CVE-2026-4277,

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Django Vulnerabilities Affecting Multiple Ubuntu Releases Multiple vulnerabilities in Django have been identified, affecting various Ubuntu versions including 22.04 LTS, 24.04 LTS, and 25.10. These vulnerabilities allow remote attackers to exploit memory handling issues, potentially leading to denial of service conditions. Specifically, CVE-2026-33033 details improper memory handling during multipart uploads, while CVE-2026-33034 reveals a lack of enforcement on upload memory size limits in the Content-Length header. Additionally, CVE-2026-4277 and CVE-2026-4292 involve issues with model data verification that could allow permission forging. The vulnerabilities were published on April 7, 2026, and are considered critical. Users are advised to update their Django packages to mitigate these risks. The affected systems include Ubuntu 18.04 LTS through 25.10, with specific package versions provided for remediation. 3 sources 73

Extracted Entities

Ubuntu 25.10 Django Critical Denial Of Service Issues USN-8154

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (5)

Platforms (2)

Tools (1)