diff options
| author | Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> | 2025-04-02 13:31:24 +0200 |
|---|---|---|
| committer | Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> | 2025-04-02 13:33:19 +0200 |
| commit | be13608613b28132bec1165dc4d495e4855402b6 (patch) | |
| tree | 9a83fb2625acd764e213050901e7b28567e40fce /docs | |
| parent | ac90c54a86a2ce5d1bc2f457af5a379512c94491 (diff) | |
[5.1.x] Added CVE-2025-27556 to security archive.
Backport of b83dab7d8da8d1dd888164de5ed79e88cedcb19b from main.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/releases/security.txt | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt index d55c7bf497..1f7d2542ff 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -36,6 +36,16 @@ Issues under Django's security process All security issues have been handled under versions of Django's security process. These are listed below. +April 2, 2025 - :cve:`2025-27556` +--------------------------------- + +Potential denial-of-service vulnerability in ``LoginView``, ``LogoutView``, and +``set_language()`` on Windows. `Full description +<https://www.djangoproject.com/weblog/2025/apr/02/security-releases/>`__ + +* Django 5.1 :commit:`(patch) <edc2716d01a6fdd84b173c02031695231bcee1f8>` +* Django 5.0 :commit:`(patch) <8c6871b097b6c49d2a782c0d80d908bcbe2116f1>` + March 6, 2025 - :cve:`2025-26699` --------------------------------- |