diff options
| author | Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> | 2025-04-02 13:31:24 +0200 |
|---|---|---|
| committer | Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> | 2025-04-02 13:33:56 +0200 |
| commit | 52821001bb62b764d73e63812133f199b8fef9eb (patch) | |
| tree | a03bc176cccf2d48b48298222be632c1f9a10b10 | |
| parent | 10815575f5697267a6675527e919a7f3bafb506d (diff) | |
[5.0.x] Added CVE-2025-27556 to security archive.stable/5.0.x
Backport of b83dab7d8da8d1dd888164de5ed79e88cedcb19b from main.
| -rw-r--r-- | docs/releases/security.txt | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt index acc143770b..a2fc685f32 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -36,6 +36,16 @@ Issues under Django's security process All security issues have been handled under versions of Django's security process. These are listed below. +April 2, 2025 - :cve:`2025-27556` +--------------------------------- + +Potential denial-of-service vulnerability in ``LoginView``, ``LogoutView``, and +``set_language()`` on Windows. `Full description +<https://www.djangoproject.com/weblog/2025/apr/02/security-releases/>`__ + +* Django 5.1 :commit:`(patch) <edc2716d01a6fdd84b173c02031695231bcee1f8>` +* Django 5.0 :commit:`(patch) <8c6871b097b6c49d2a782c0d80d908bcbe2116f1>` + March 6, 2025 - :cve:`2025-26699` --------------------------------- |