diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0c8c62f..b42613c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@ Note: Breaking changes between versions are indicated by "💥".
 
 ## Unreleased
 
+- [Security] Upgrade django to 1.11.28
 - [Improvement] Make it possible to configure the elasticsearch heap size
 - [Bugfix] Fix broken elasticsearch environment variables
 - [Improvement] Restore more recent Android app version (#289).
diff --git a/tutor/templates/build/openedx/Dockerfile b/tutor/templates/build/openedx/Dockerfile
index a5dcf73..a01e65d 100644
--- a/tutor/templates/build/openedx/Dockerfile
+++ b/tutor/templates/build/openedx/Dockerfile
@@ -35,6 +35,7 @@ RUN curl https://github.com/overhangio/edx-platform/commit/0d4f6cc3433013960b28e
 RUN curl https://github.com/edx/edx-platform/commit/7731c68b91ba662e6433ab46e434860afc497944.patch | git apply -
 RUN curl https://github.com/edx/edx-platform/commit/86f4902257a431a1a465eec585a116c19d2c4659.patch | git apply -
 RUN curl https://github.com/edx/edx-platform/commit/9490d8e083ccdcf8341694e38bbd9f7200ea2ff3.patch | git apply -
+RUN curl https://github.com/edx/edx-platform/commit/df76bb257a9946271bff8ed2650d158a83a035a8.patch | git apply -
 
 # Download extra locales to /openedx/locale
 RUN cd /tmp \