django.git, branch stable/3.0.x django http://cgit.adnoto.dev/django.git/atom?h=stable%2F3.0.x 2021-04-06T07:47:14Z [3.0.x] Added CVE-2021-28658 to security archive. 2021-04-06T07:47:14Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-04-06T07:42:31Z urn:sha1:2a04e24d2dfc8e60a66e4369d970913cb2112d91 Backport of 1eac8468cbde790fecb51dd055a439f4947d01e9 from main [3.0.x] Post-release version bump. 2021-04-06T06:37:12Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-04-06T06:37:12Z urn:sha1:0d71c48106d8b3aa8ddc371d14514acad7ecebdc [3.0.x] Bumped version for 3.0.14 release. 2021-04-06T06:34:45Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-04-06T06:34:45Z urn:sha1:f52800243545af658c27f83623b5fc72ae6b8dcf [3.0.x] Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files. 2021-04-06T06:33:16Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-03-16T09:19:00Z urn:sha1:e7fba62248f604c76da4f23dcf1db4a57b0808ea Thanks Claude Paroz for the initial patch. Thanks Dennis Brinkrolf for the report. Backport of d4d800ca1addc4141e03c5440a849bb64d1582cd from main. [3.0.x] Added CVE-2021-23336 to security archive. 2021-02-19T10:06:46Z Carlton Gibson carlton.gibson@noumenal.es 2021-02-19T10:06:46Z urn:sha1:232d5f61e6afd9cd6f10a47ddb4375f86818717e Backport of ab58f072502e86dfe21b2bd5cccdc5e94dce8d26 from master [3.0.x] Post-release version bump. 2021-02-19T08:43:26Z Carlton Gibson carlton.gibson@noumenal.es 2021-02-19T08:43:26Z urn:sha1:cb7e3ff4a1d4132609751d0dee40e93c8cbda1c3 [3.0.x] Bumped version for 3.0.13 release. 2021-02-19T08:42:24Z Carlton Gibson carlton.gibson@noumenal.es 2021-02-19T08:42:24Z urn:sha1:04a9b7df3fe627d03547a01330a20dfcbf2e8bd5 [3.0.x] Fixed CVE-2021-23336 -- Fixed web cache poisoning via django.utils.http.limited_parse_qsl(). 2021-02-18T09:21:04Z Nick Pope nick@nickpope.me.uk 2021-02-16T10:14:17Z urn:sha1:326a926beef869d3341bc9ef737887f0449b6b71 [3.0.x] Added documentation extlink for bugs.python.org. 2021-02-17T13:27:36Z Nick Pope nick@nickpope.me.uk 2021-02-16T10:08:39Z urn:sha1:ad36388406195ecddb319fea862298e6c8d27d3b Backport of d02d60eb0f032c9395199fb73c6cd29ee9bb2646 from master [3.0.x] Added CVE-2021-3281 to security archive. 2021-02-01T09:46:46Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-02-01T09:21:30Z urn:sha1:0194f0be31b92c8e66636859df618611fb2f4d18 Backport of f749148d62ece28d208ab66b109f858215ba090a from master