diff options
| author | Tim Graham <timograham@gmail.com> | 2018-08-01 10:51:24 -0400 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2018-08-01 10:51:24 -0400 |
| commit | 0006538e53bf11d1de26801b13b78807354de2c8 (patch) | |
| tree | 1b0788b37d7d620f096fc512e58b8146ca8bb4e1 /docs/releases/security.txt | |
| parent | a656a681272f8f3734b6eb38e9a88aa0d91806f1 (diff) | |
Added CVE-2018-14574 to the security release archive.
Diffstat (limited to 'docs/releases/security.txt')
| -rw-r--r-- | docs/releases/security.txt | 17 |
1 files changed, 15 insertions, 2 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt index 47aef2bb24..f74ec87c7e 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -863,7 +863,7 @@ March 6, 2018 - :cve:`2018-7536` Denial-of-service possibility in ``urlize`` and ``urlizetrunc`` template filters. `Full description -<https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>`_ +<https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>`__ Versions affected ~~~~~~~~~~~~~~~~~ @@ -877,7 +877,7 @@ March 6, 2018 - :cve:`2018-7537` Denial-of-service possibility in ``truncatechars_html`` and ``truncatewords_html`` template filters. `Full description -<https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>`_ +<https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>`__ Versions affected ~~~~~~~~~~~~~~~~~ @@ -885,3 +885,16 @@ Versions affected * Django 2.0 `(patch) <https://github.com/django/django/commit/94c5da1d17a6b0d378866c66b605102c19f7988c>`__ * Django 1.11 `(patch) <https://github.com/django/django/commit/a91436360b79a6ff995c3e5018bcc666dfaf1539>`__ * Django 1.8 `(patch) <https://github.com/django/django/commit/d17974a287a6ea2e361daff88fcc004cbd6835fa>`__ + +August 1, 2018 - :cve:`2018-14574` +---------------------------------- + +Open redirect possibility in ``CommonMiddleware``. `Full description +<https://www.djangoproject.com/weblog/2018/aug/01/security-releases/>`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 2.1 `(patch) <https://github.com/django/django/commit/c4e5ff7fdb5fce447675e90291fd33fddd052b3c>`__ +* Django 2.0 `(patch) <https://github.com/django/django/commit/6fffc3c6d420e44f4029d5643f38d00a39b08525>`__ +* Django 1.11 `(patch) <https://github.com/django/django/commit/d6eaee092709aad477a9894598496c6deec532ff>`__ |