django.git, branch 3.0.14 django http://cgit.adnoto.dev/django.git/atom?h=3.0.14 2021-04-06T06:34:45Z [3.0.x] Bumped version for 3.0.14 release. 2021-04-06T06:34:45Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-04-06T06:34:45Z urn:sha1:f52800243545af658c27f83623b5fc72ae6b8dcf [3.0.x] Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files. 2021-04-06T06:33:16Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-03-16T09:19:00Z urn:sha1:e7fba62248f604c76da4f23dcf1db4a57b0808ea Thanks Claude Paroz for the initial patch. Thanks Dennis Brinkrolf for the report. Backport of d4d800ca1addc4141e03c5440a849bb64d1582cd from main. [3.0.x] Added CVE-2021-23336 to security archive. 2021-02-19T10:06:46Z Carlton Gibson carlton.gibson@noumenal.es 2021-02-19T10:06:46Z urn:sha1:232d5f61e6afd9cd6f10a47ddb4375f86818717e Backport of ab58f072502e86dfe21b2bd5cccdc5e94dce8d26 from master [3.0.x] Post-release version bump. 2021-02-19T08:43:26Z Carlton Gibson carlton.gibson@noumenal.es 2021-02-19T08:43:26Z urn:sha1:cb7e3ff4a1d4132609751d0dee40e93c8cbda1c3 [3.0.x] Bumped version for 3.0.13 release. 2021-02-19T08:42:24Z Carlton Gibson carlton.gibson@noumenal.es 2021-02-19T08:42:24Z urn:sha1:04a9b7df3fe627d03547a01330a20dfcbf2e8bd5 [3.0.x] Fixed CVE-2021-23336 -- Fixed web cache poisoning via django.utils.http.limited_parse_qsl(). 2021-02-18T09:21:04Z Nick Pope nick@nickpope.me.uk 2021-02-16T10:14:17Z urn:sha1:326a926beef869d3341bc9ef737887f0449b6b71 [3.0.x] Added documentation extlink for bugs.python.org. 2021-02-17T13:27:36Z Nick Pope nick@nickpope.me.uk 2021-02-16T10:08:39Z urn:sha1:ad36388406195ecddb319fea862298e6c8d27d3b Backport of d02d60eb0f032c9395199fb73c6cd29ee9bb2646 from master [3.0.x] Added CVE-2021-3281 to security archive. 2021-02-01T09:46:46Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-02-01T09:21:30Z urn:sha1:0194f0be31b92c8e66636859df618611fb2f4d18 Backport of f749148d62ece28d208ab66b109f858215ba090a from master [3.0.x] Post-release version bump. 2021-02-01T08:48:38Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-02-01T08:48:38Z urn:sha1:bfe24c380355c753b9d6b38a841d8f0e0491b571 [3.0.x] Bumped version for 3.0.12 release. 2021-02-01T08:40:04Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-02-01T08:40:04Z urn:sha1:81c99e4eb00b58e3eb33f3d5c1747b6c57e9d649