1
0
mirror of https://github.com/django/django.git synced 2025-07-14 06:39:24 +00:00

6 Commits

Author SHA1 Message Date
Carlton Gibson
dfcecb6e6c [2.2.x] Added release date for 2.2.16.
Backport of 976e2b7420c0f7e3060a13792b97511a9aad31d7 from master
2020-09-01 10:00:28 +02:00
Mariusz Felisiak
a3aebfdc81 [2.2.x] Fixed CVE-2020-24584 -- Fixed permission escalation in intermediate-level directories of the file system cache on Python 3.7+.
Backport of f56b57976133129b0b351a38bba4ac882badabf0 from master.
2020-08-25 11:09:40 +02:00
Mariusz Felisiak
375657a71c [2.2.x] Fixed CVE-2020-24583, #31921 -- Fixed permissions on intermediate-level static and storage directories on Python 3.7+.
Thanks WhiteSage for the report.

Backport of ea0febbba531a3ecc8c77b570efbfb68ca7155db from master.
2020-08-25 10:59:42 +02:00
Mariusz Felisiak
dc39e62e6b [2.2.x] Refs #31863 -- Added release notes for 94ea79be137f3cb30949bf82198e96e094f2650d.
Backport of 21768a99f47ee73a2f93405151550ef7c3d9c8a2 from master
2020-08-13 16:32:58 +02:00
Daniel Hillier
839f906a23 [2.2.x] Fixed #31866 -- Fixed locking proxy models in QuerySet.select_for_update(of=()).
Backport of 60626162f76f26d32a38d18151700cb041201fb3 from master
2020-08-11 12:33:18 +02:00
Mariusz Felisiak
30706246e7 [2.2.x] Added stub release notes for 2.2.16.
Backport of 8a5683b6b2aede38edcff070686ed1fce470dec5 from master
2020-08-11 11:14:35 +02:00