Ubuntu Security Notice 1560-1 - It was discovered that Django incorrectly validated the scheme of a redirect target. If a user were tricked into opening a specially crafted URL, an attacker could possibly exploit this to conduct cross-site scripting (XSS) attacks. It was discovered that Django incorrectly handled validating certain images. A remote attacker could use this flaw to cause the server to consume memory, leading to a denial of service. Various other issues were also addressed.
9f6992ce555ed77fffedae76ac5c6ba847bd77558a7f5ac9a81ab269744ed427