diff options
| author | Natalia <124304+nessita@users.noreply.github.com> | 2025-11-05 11:17:12 -0300 |
|---|---|---|
| committer | Natalia <124304+nessita@users.noreply.github.com> | 2025-11-05 11:19:21 -0300 |
| commit | d2a414b56f0289343433ca252db89e18f3090b15 (patch) | |
| tree | 9803bda212594d905de100a2830db955d0fa0dd8 | |
| parent | 4df904721eaa0fca88a641cfc3e016cbb4242e99 (diff) | |
[4.2.x] Added CVE-2025-64458 and CVE-2025-64459 to security archive.
Backport of c5a107e8248813f07325ae65232b5e53e9ac4238 from main.
| -rw-r--r-- | docs/releases/security.txt | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt index f1e96fa98e..e5b9878abc 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -36,6 +36,30 @@ Issues under Django's security process All security issues have been handled under versions of Django's security process. These are listed below. +November 5, 2025 - :cve:`2025-64458` +------------------------------------ + +Potential denial-of-service vulnerability in ``HttpResponseRedirect`` and +``HttpResponsePermanentRedirect`` on Windows. `Full description +<https://www.djangoproject.com/weblog/2025/nov/05/security-releases/>`__ + +* Django 6.0 :commit:`(patch) <6e13348436fccf8f22982921d6a3a3e65c956a9f>` +* Django 5.2 :commit:`(patch) <4f5d904b63751dea9ffc3b0e046404a7fa5881ac>` +* Django 5.1 :commit:`(patch) <3790593781d26168e7306b5b2f8ea0309de16242>` +* Django 4.2 :commit:`(patch) <770eea38d7a0e9ba9455140b5a9a9e33618226a7>` + +November 5, 2025 - :cve:`2025-64459` +------------------------------------ + +Potential SQL injection via ``_connector`` keyword argument in ``QuerySet`` and +``Q`` objects. `Full description +<https://www.djangoproject.com/weblog/2025/nov/05/security-releases/>`__ + +* Django 6.0 :commit:`(patch) <06dd38324ac3d60d83d9f3adabf0dcdf423d2a85>` +* Django 5.2 :commit:`(patch) <6703f364d767e949c5b0e4016433ef75063b4f9b>` +* Django 5.1 :commit:`(patch) <72d2c87431f2ae0431d65d0ec792047f078c8241>` +* Django 4.2 :commit:`(patch) <59ae82e67053d281ff4562a24bbba21299f0a7d4>` + October 1, 2025 - :cve:`2025-59681` ----------------------------------- |