@@ -36,6 +36,47 @@ Issues under Django's security process
36
36
All security issues have been handled under versions of Django's security
37
37
process. These are listed below.
38
38
39
+ January 4, 2022 - :cve:`2021-45452`
40
+ ------------------------------------
41
+
42
+ Potential directory-traversal via ``Storage.save()``. `Full description
43
+ <https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>`__
44
+
45
+ Versions affected
46
+ ~~~~~~~~~~~~~~~~~
47
+
48
+ * Django 4.0 :commit:`(patch) <e1592e0f26302e79856cc7f2218ae848ae19b0f6>`
49
+ * Django 3.2 :commit:`(patch) <8d2f7cff76200cbd2337b2cf1707e383eb1fb54b>`
50
+ * Django 2.2 :commit:`(patch) <4cb35b384ceef52123fc66411a73c36a706825e1>`
51
+
52
+ January 4, 2022 - :cve:`2021-45116`
53
+ ------------------------------------
54
+
55
+ Potential information disclosure in ``dictsort`` template filter. `Full
56
+ description
57
+ <https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>`__
58
+
59
+ Versions affected
60
+ ~~~~~~~~~~~~~~~~~
61
+
62
+ * Django 4.0 :commit:`(patch) <2a8ec7f546d6d5806e221ec948c5146b55bd7489>`
63
+ * Django 3.2 :commit:`(patch) <c7fe895bca06daf12cc1670b56eaf72a1ef27a16>`
64
+ * Django 2.2 :commit:`(patch) <c9f648ccfac5ab90fb2829a66da4f77e68c7f93a>`
65
+
66
+ January 4, 2022 - :cve:`2021-45115`
67
+ ------------------------------------
68
+
69
+ Denial-of-service possibility in ``UserAttributeSimilarityValidator``. `Full
70
+ description
71
+ <https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>`__
72
+
73
+ Versions affected
74
+ ~~~~~~~~~~~~~~~~~
75
+
76
+ * Django 4.0 :commit:`(patch) <df79ef03ac867c93caaa6be56bc69e66abfeef8f>`
77
+ * Django 3.2 :commit:`(patch) <a8b32fe13bcaed1c0b772fdc53de84abc224fb20>`
78
+ * Django 2.2 :commit:`(patch) <2135637fdd5ce994de110affef9e67dffdf77277>`
79
+
39
80
December 7, 2021 - :cve:`2021-44420`
40
81
------------------------------------
41
82
0 commit comments