diff --git a/docs/releases/security.txt b/docs/releases/security.txt index e7a7841e19..4e6e2a25bf 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -623,3 +623,43 @@ Versions affected ----------------- * Django 1.8 `(patch) `__ + +July 8, 2015 - CVE-2015-5143 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +`CVE-2015-5143 `_: +Denial-of-service possibility by filling session store. +`Full description `__ + +Versions affected +----------------- + +* Django 1.8 `(patch) `__ +* Django 1.7 `(patch) `__ +* Django 1.4 `(patch) `__ + +July 8, 2015 - CVE-2015-5144 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +`CVE-2015-5144 `_: +Header injection possibility since validators accept newlines in input. +`Full description `__ + +Versions affected +----------------- + +* Django 1.8 `(patch) `__ +* Django 1.7 `(patch) `__ +* Django 1.4 `(patch) `__ + +July 8, 2015 - CVE-2015-5145 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +`CVE-2015-5145 `_: +Denial-of-service possibility in URL validation. +`Full description `__ + +Versions affected +----------------- + +* Django 1.8 `(patch) `__