← Search the atlas
SUSE-SU-2022:0286-1
Not scored
Security update for python-Django
This update for python-Django fixes the following issues:
- CVE-2022-22818: Fixed possible XSS via {% debug %} template tag (bsc#1195086)
- CVE-2022-23833: Fixed denial-of-service possibility in file uploads. (bsc#1195088)
A regression in the fix for CVE-2021-45452 was fixed (bsc#1194116)
Exploit probability
Not scored
Published
February 1, 2022
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:HPE Helion OpenStack 8
venv-openstack-nova
SUSE:HPE Helion OpenStack 8
venv-openstack-keystone
SUSE:OpenStack Cloud 8
venv-openstack-neutron
SUSE:HPE Helion OpenStack 8
venv-openstack-magnum
SUSE:HPE Helion OpenStack 8
venv-openstack-manila
SUSE:OpenStack Cloud 8
venv-openstack-ceilometer
SUSE:OpenStack Cloud 8
venv-openstack-nova
SUSE:HPE Helion OpenStack 8
venv-openstack-ironic
SUSE:OpenStack Cloud Crowbar 8
python-Django
SUSE:HPE Helion OpenStack 8
venv-openstack-ceilometer
SUSE:HPE Helion OpenStack 8
venv-openstack-trove
SUSE:OpenStack Cloud 8
venv-openstack-glance
SUSE:HPE Helion OpenStack 8
venv-openstack-freezer
SUSE:OpenStack Cloud 8
venv-openstack-aodh
SUSE:OpenStack Cloud 8
venv-openstack-murano
SUSE:OpenStack Cloud 8
venv-openstack-manila
SUSE:HPE Helion OpenStack 8
venv-openstack-designate
SUSE:HPE Helion OpenStack 8
venv-openstack-barbican
SUSE:HPE Helion OpenStack 8
venv-openstack-neutron
SUSE:OpenStack Cloud 8
venv-openstack-octavia
SUSE:HPE Helion OpenStack 8
venv-openstack-sahara
SUSE:HPE Helion OpenStack 8
venv-openstack-horizon-hpe
SUSE:OpenStack Cloud 8
venv-openstack-magnum
SUSE:OpenStack Cloud 8
venv-openstack-monasca-ceilometer
SUSE:HPE Helion OpenStack 8
python-Django
SUSE:OpenStack Cloud 8
venv-openstack-trove
SUSE:HPE Helion OpenStack 8
venv-openstack-heat
SUSE:HPE Helion OpenStack 8
venv-openstack-cinder
SUSE:OpenStack Cloud 8
venv-openstack-heat
SUSE:HPE Helion OpenStack 8
venv-openstack-monasca
SUSE:OpenStack Cloud 8
venv-openstack-horizon
SUSE:OpenStack Cloud 8
venv-openstack-designate
SUSE:OpenStack Cloud 8
venv-openstack-freezer
SUSE:OpenStack Cloud 8
venv-openstack-monasca
SUSE:OpenStack Cloud 8
venv-openstack-cinder
SUSE:HPE Helion OpenStack 8
venv-openstack-murano
SUSE:OpenStack Cloud 8
python-Django
SUSE:OpenStack Cloud 8
venv-openstack-keystone
SUSE:OpenStack Cloud 8
venv-openstack-ironic
SUSE:HPE Helion OpenStack 8
venv-openstack-monasca-ceilometer
SUSE:HPE Helion OpenStack 8
venv-openstack-octavia
SUSE:HPE Helion OpenStack 8
venv-openstack-swift
SUSE:OpenStack Cloud 8
venv-openstack-swift
SUSE:OpenStack Cloud 8
venv-openstack-sahara
SUSE:HPE Helion OpenStack 8
venv-openstack-glance
SUSE:HPE Helion OpenStack 8
venv-openstack-aodh
SUSE:OpenStack Cloud 8
venv-openstack-barbican
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2022:0286-1
This update for python-Django fixes the following issues:
- CVE-2022-22818: Fixed possible XSS via {% debug %} template tag (bsc#1195086)
- CVE-2022-23833: Fixed denial-of-service possibility in file uploads. (bsc#1195088)
A regression in the fix for CVE-2021-45452 was fixed (bsc#1194116)
View original source ↗
05 / REFERENCES
Further evidence