django.git, branch 4.2.14 django http://cgit.adnoto.dev/django.git/atom?h=4.2.14 2024-07-09T13:53:02Z [4.2.x] Bumped version for 4.2.14 release. 2024-07-09T13:53:02Z Natalia 124304+nessita@users.noreply.github.com 2024-07-09T13:53:02Z urn:sha1:98cf264c9cb0561e4ec305a621e9d58116e44aef [4.2.x] Fixed CVE-2024-39614 -- Mitigated potential DoS in get_supported_language_variant(). 2024-07-09T13:40:50Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2024-06-26T10:11:54Z urn:sha1:17358fb35fb7217423d4c4877ccb6d1a3a40b1c3 Language codes are now parsed with a maximum length limit of 500 chars. Thanks to MProgrammer for the report. [4.2.x] Fixed CVE-2024-39330 -- Added extra file name validation in Storage's save method. 2024-07-09T13:40:48Z Natalia 124304+nessita@users.noreply.github.com 2024-03-20T16:55:21Z urn:sha1:2b00edc0151a660d1eb86da4059904a0fc4e095e Thanks to Josh Schneier for the report, and to Carlton Gibson and Sarah Boyce for the reviews. [4.2.x] Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords. 2024-07-09T13:40:46Z Michael Manfre mike@manfre.net 2024-06-15T02:12:58Z urn:sha1:156d3186c96e3ec2ca73b8b25dc2ef366e38df14 Refs #20760. Thanks Michael Manfre for the fix and to Adam Johnson for the review. [4.2.x] Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters. 2024-07-09T13:40:37Z Adam Johnson me@adamj.eu 2024-06-24T13:30:59Z urn:sha1:79f368764295df109a37192f6182fb6f361d85b5 Thank you to Elias Myllymäki for the report. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> [4.2.x] Added stub release notes for 4.2.14. 2024-07-03T17:18:28Z Natalia 124304+nessita@users.noreply.github.com 2024-07-03T17:09:34Z urn:sha1:446cdab13485e99939f06b74c563d5bb992330b2 [4.2.x]Post-release version bump. 2024-05-07T17:44:42Z Natalia 124304+nessita@users.noreply.github.com 2024-05-07T17:44:42Z urn:sha1:d26c8838d0a447d5cba03a0b4eebd5fc2d27e9df [4.2.x] Bumped version for 4.2.13 release. 2024-05-07T15:37:03Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2024-05-07T15:37:03Z urn:sha1:3bf46e2e023904c825728267f3131c42f02ce696 [4.2.x] Added release notes for 4.2.13. 2024-05-07T15:35:16Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2024-05-07T14:38:09Z urn:sha1:b46b94e66ccc81ac3586baac045f5bab50d8d6a9 Backport of 90175e110e7cfcf07f4ccdaadc45d7ed6302ce00 from main. [4.2.x] Post-release version bump. 2024-05-06T17:36:28Z Natalia 124304+nessita@users.noreply.github.com 2024-05-06T17:36:28Z urn:sha1:1536833e93a72a24e7ad32c04a922be83c328756