Mariusz Felisiak
f27c38ab5d
[2.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.
...
validate_ipv4_address() was affected only on Python < 3.9.5, see [1].
URLValidator() uses a regular expressions and it was affected on all
Python versions.
[1] https://bugs.python.org/issue36384
2021-06-02 10:26:22 +02:00
Florian Apolloner
053cc9534d
[2.2.x] Fixed CVE-2021-33203 -- Fixed potential path-traversal via admindocs' TemplateDetailView.
2021-06-02 10:26:22 +02:00
Carlton Gibson
6229d8794f
[2.2.x] Confirmed release date for Django 2.2.24.
...
Backport of f66ae7a2d5558fe88ddfe639a610573872be6628 from main.
2021-06-02 10:23:20 +02:00
Carlton Gibson
f163ad5c63
[2.2.x] Added stub release notes and date for Django 2.2.24.
...
Backport of b46dbd4e3e255223078ae0028934ea986e19ebc1 from main
2021-05-26 10:21:53 +02:00
