diff options
| author | Carlton Gibson <carlton.gibson@noumenal.es> | 2020-06-03 12:03:27 +0200 |
|---|---|---|
| committer | Carlton Gibson <carlton.gibson@noumenal.es> | 2020-09-01 11:39:57 +0200 |
| commit | 65078cf0603f0fe29d4d11e902a88c12c8d1048a (patch) | |
| tree | 655f516cc9df32e2d4b1c6f8d39ef9e3143d9173 | |
| parent | 0696540e230ddf4b46a29196776a6e8516d44095 (diff) | |
[2.2.x] Added CVE-2020-13254 and CVE-2020-13596 to security archive.
Backport of 54975780ee2e4017844ecad94835fdce43d97377 from master
| -rw-r--r-- | docs/releases/security.txt | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt index 340aba041b..d896974e72 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -1082,3 +1082,27 @@ Versions affected * Django 3.0 :commit:`(patch) <26a5cf834526e291db00385dd33d319b8271fc4c>` * Django 2.2 :commit:`(patch) <fe886a3b58a93cfbe8864b485f93cb6d426cd1f2>` * Django 1.11 :commit:`(patch) <02d97f3c9a88adc890047996e5606180bd1c6166>` + +June 3, 2020 - :cve:`2020-13254` +-------------------------------- + +Potential data leakage via malformed memcached keys. `Full description +<https://www.djangoproject.com/weblog/2020/jun/03/security-releases/>`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 3.0 :commit:`(patch) <84b2da5552e100ae3294f564f6c862fef8d0e693>` +* Django 2.2 :commit:`(patch) <07e59caa02831c4569bbebb9eb773bdd9cb4b206>` + +June 3, 2020 - :cve:`2020-13596` +-------------------------------- + +Possible XSS via admin ``ForeignKeyRawIdWidget``. `Full description +<https://www.djangoproject.com/weblog/2020/jun/03/security-releases/>`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 3.0 :commit:`(patch) <1f2dd37f6fcefdd10ed44cb233b2e62b520afb38>` +* Django 2.2 :commit:`(patch) <6d61860b22875f358fac83d903dc629897934815>` |