Skip to content

Commit 027f4c4

Browse files
committed
[3.2.x] Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive.
Backport of 63869ab from main
1 parent 0a9a46a commit 027f4c4

File tree

1 file changed

+41
-0
lines changed

1 file changed

+41
-0
lines changed

docs/releases/security.txt

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,47 @@ Issues under Django's security process
3636
All security issues have been handled under versions of Django's security
3737
process. These are listed below.
3838

39+
January 4, 2022 - :cve:`2021-45452`
40+
------------------------------------
41+
42+
Potential directory-traversal via ``Storage.save()``. `Full description
43+
<https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>`__
44+
45+
Versions affected
46+
~~~~~~~~~~~~~~~~~
47+
48+
* Django 4.0 :commit:`(patch) <e1592e0f26302e79856cc7f2218ae848ae19b0f6>`
49+
* Django 3.2 :commit:`(patch) <8d2f7cff76200cbd2337b2cf1707e383eb1fb54b>`
50+
* Django 2.2 :commit:`(patch) <4cb35b384ceef52123fc66411a73c36a706825e1>`
51+
52+
January 4, 2022 - :cve:`2021-45116`
53+
------------------------------------
54+
55+
Potential information disclosure in ``dictsort`` template filter. `Full
56+
description
57+
<https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>`__
58+
59+
Versions affected
60+
~~~~~~~~~~~~~~~~~
61+
62+
* Django 4.0 :commit:`(patch) <2a8ec7f546d6d5806e221ec948c5146b55bd7489>`
63+
* Django 3.2 :commit:`(patch) <c7fe895bca06daf12cc1670b56eaf72a1ef27a16>`
64+
* Django 2.2 :commit:`(patch) <c9f648ccfac5ab90fb2829a66da4f77e68c7f93a>`
65+
66+
January 4, 2022 - :cve:`2021-45115`
67+
------------------------------------
68+
69+
Denial-of-service possibility in ``UserAttributeSimilarityValidator``. `Full
70+
description
71+
<https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>`__
72+
73+
Versions affected
74+
~~~~~~~~~~~~~~~~~
75+
76+
* Django 4.0 :commit:`(patch) <df79ef03ac867c93caaa6be56bc69e66abfeef8f>`
77+
* Django 3.2 :commit:`(patch) <a8b32fe13bcaed1c0b772fdc53de84abc224fb20>`
78+
* Django 2.2 :commit:`(patch) <2135637fdd5ce994de110affef9e67dffdf77277>`
79+
3980
December 7, 2021 - :cve:`2021-44420`
4081
------------------------------------
4182

0 commit comments

Comments
 (0)