diff options
| author | Tim Graham <timograham@gmail.com> | 2016-11-01 10:48:11 -0400 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2016-11-01 10:48:49 -0400 |
| commit | 734ef022a17180288a2ea65e2319676692bc9926 (patch) | |
| tree | 91f884fc1104b2b6a9e18698761f5e74a6b7e487 /docs | |
| parent | a7710f622ad5483e79900c5eaaa716c1c4210e92 (diff) | |
[1.9.x] Added CVE-2016-9013,14 to the security release archive.
Backport of b8ae2c16cfc4bf88c1720eafd8e35438181a7413 from master
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/releases/security.txt | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt index 898b7f3c30..171e19d85e 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -781,3 +781,29 @@ Versions affected * Django 1.9 `(patch) <https://github.com/django/django/commit/d1bc980db1c0fffd6d60677e62f70beadb9fe64a>`__ * Django 1.8 `(patch) <https://github.com/django/django/commit/6118ab7d0676f0d622278e5be215f14fb5410b6a>`__ + +November 1, 2016 - :cve:`2016-9013` +----------------------------------- + +User with hardcoded password created when running tests on Oracle. `Full +description <https://www.djangoproject.com/weblog/2016/nov/01/security-releases/>`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 1.10 `(patch) <https://github.com/django/django/commit/34e10720d81b8d407aa14d763b6a7fe8f13b4f2e>`__ +* Django 1.9 `(patch) <https://github.com/django/django/commit/4844d86c7728c1a5a3bbce4ad336a8d32304072b>`__ +* Django 1.8 `(patch) <https://github.com/django/django/commit/70f99952965a430daf69eeb9947079aae535d2d0>`__ + +November 1, 2016 - :cve:`2016-9014` +----------------------------------- + +DNS rebinding vulnerability when ``DEBUG=True``. `Full description +<https://www.djangoproject.com/weblog/2016/nov/01/security-releases/>`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 1.10 `(patch) <https://github.com/django/django/commit/884e113838e5a72b4b0ec9e5e87aa480f6aa4472>`__ +* Django 1.9 `(patch) <https://github.com/django/django/commit/45acd6d836895a4c36575f48b3fb36a3dae98d19>`__ +* Django 1.8 `(patch) <https://github.com/django/django/commit/c401ae9a7dfb1a94a8a61927ed541d6f93089587>`__ |