chango.git, branch 2.2.20 django http://cgit.adnoto.dev/chango.git/atom?h=2.2.20 2021-04-06T06:39:37Z [2.2.x] Bumped version for 2.2.20 release. 2021-04-06T06:39:37Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-04-06T06:39:37Z urn:sha1:ad9fa56a17bf9691615e9bb6e41d08d51cfe8a5d [2.2.x] Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files. 2021-04-06T06:38:19Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-03-16T09:19:00Z urn:sha1:4036d62bda0e9e9f6172943794b744a454ca49c2 Thanks Claude Paroz for the initial patch. Thanks Dennis Brinkrolf for the report. Backport of d4d800ca1addc4141e03c5440a849bb64d1582cd from main. [2.2.x] Added CVE-2021-23336 to security archive. 2021-02-19T10:07:56Z Carlton Gibson carlton.gibson@noumenal.es 2021-02-19T10:07:56Z urn:sha1:6e58828f8bcd33dfc91f236a972ae5fd23c9b0bc Backport of ab58f072502e86dfe21b2bd5cccdc5e94dce8d26 from master [2.2.x] Post-release version bump. 2021-02-19T08:45:49Z Carlton Gibson carlton.gibson@noumenal.es 2021-02-19T08:45:49Z urn:sha1:1fb4628a83ab597da41bf88011a3b3ae1980b458 [2.2.x] Bumped version for 2.2.19 release. 2021-02-19T08:44:55Z Carlton Gibson carlton.gibson@noumenal.es 2021-02-19T08:44:55Z urn:sha1:21a5547793a24357a985390970b489aeeca06d45 [2.2.x] Fixed CVE-2021-23336 -- Fixed web cache poisoning via django.utils.http.limited_parse_qsl(). 2021-02-18T09:27:25Z Nick Pope nick@nickpope.me.uk 2021-02-16T10:14:17Z urn:sha1:fd6b6afd5959b638c62dbf4839ccff97e7f7dfda [2.2.x] Added documentation extlink for bugs.python.org. 2021-02-17T13:28:05Z Nick Pope nick@nickpope.me.uk 2021-02-16T10:08:39Z urn:sha1:226d8319181b94b093708b8cdd4ab5e257a79df6 Backport of d02d60eb0f032c9395199fb73c6cd29ee9bb2646 from master [2.2.x] Added CVE-2021-3281 to security archive. 2021-02-01T09:47:08Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-02-01T09:21:30Z urn:sha1:34010d8ffaae5fb2400789720af17d9dfccd4fad Backport of f749148d62ece28d208ab66b109f858215ba090a from master [2.2.x] Post-release version bump. 2021-02-01T08:49:28Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-02-01T08:49:28Z urn:sha1:06ae7e0742e65fca7abc6c8ccc7ce1d21bd303ed [2.2.x] Bumped version for 2.2.18 release. 2021-02-01T08:43:16Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-02-01T08:43:16Z urn:sha1:fc0c8cfa492b2d7b82263e71e486f3829ad7c43a