1
0
mirror of https://github.com/django/django.git synced 2025-07-17 16:19:12 +00:00

6 Commits

Author SHA1 Message Date
Carlton Gibson
1ef38005a7 [3.1.x] Added release date for 3.1.1, 3.0.10, and 2.2.16.
Backport of 976e2b7420c0f7e3060a13792b97511a9aad31d7 from master
2020-09-01 09:57:12 +02:00
Mariusz Felisiak
2b099caa59 [3.1.x] Fixed CVE-2020-24584 -- Fixed permission escalation in intermediate-level directories of the file system cache on Python 3.7+.
Backport of f56b57976133129b0b351a38bba4ac882badabf0 from master.
2020-09-01 09:35:05 +02:00
Mariusz Felisiak
934430d22a [3.1.x] Fixed CVE-2020-24583, #31921 -- Fixed permissions on intermediate-level static and storage directories on Python 3.7+.
Thanks WhiteSage for the report.

Backport of ea0febbba531a3ecc8c77b570efbfb68ca7155db from master.
2020-09-01 09:35:05 +02:00
Mariusz Felisiak
18e87ac85f [3.1.x] Refs #31863 -- Added release notes for 94ea79be137f3cb30949bf82198e96e094f2650d.
Backport of 21768a99f47ee73a2f93405151550ef7c3d9c8a2 from master
2020-08-13 16:30:37 +02:00
Daniel Hillier
f139372491 [3.1.x] Fixed #31866 -- Fixed locking proxy models in QuerySet.select_for_update(of=()).
Backport of 60626162f76f26d32a38d18151700cb041201fb3 from master
2020-08-11 12:30:31 +02:00
Mariusz Felisiak
daf4f70eae [3.1.x] Added stub release notes for 2.2.16 and 3.0.10.
Backport of 8a5683b6b2aede38edcff070686ed1fce470dec5 from master
2020-08-11 11:12:51 +02:00