mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00
Code Issues 32 Releases Wiki Activity

Added CVE-2021-28658 to security archive.

Browse Source
This commit is contained in:
Mariusz Felisiak
2021-04-06 09:42:31 +02:00
parent d4d800ca1a
commit 1eac8468cb
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
docs/releases/security.txt
View File

@@ -36,6 +36,20 @@ Issues under Django's security process
All security issues have been handled under versions of Django's security
process. These are listed below.
April 6, 2021 - :cve:`2021-28658`
---------------------------------
Potential directory-traversal via uploaded files. `Full description
<https://www.djangoproject.com/weblog/2021/apr/06/security-releases/>`__
Versions affected
~~~~~~~~~~~~~~~~~
* Django 3.2 :commit:`(patch) <2820fd1be5dfccbf1216c3845fad8580502473e1>`
* Django 3.1 :commit:`(patch) <cca0d98118cccf9ae0c6dcf2d6c57fc50469fbf0>`
* Django 3.0 :commit:`(patch) <e7fba62248f604c76da4f23dcf1db4a57b0808ea>`
* Django 2.2 :commit:`(patch) <4036d62bda0e9e9f6172943794b744a454ca49c2>`
February 19, 2021 - :cve:`2021-23336`
-------------------------------------