summaryrefslogtreecommitdiff
path: root/docs/releases/security.txt
diff options
context:
space:
mode:
authorNatalia <124304+nessita@users.noreply.github.com>2025-01-14 11:37:50 -0300
committerNatalia <124304+nessita@users.noreply.github.com>2025-01-14 11:39:32 -0300
commit8769b44fdabc960dc23d1222430470809fd751b1 (patch)
treec2bad42707c770860dc93d61fd7bd5130e5ce922 /docs/releases/security.txt
parent01db9774f6bdf898bd66e542de1ef4c15ca570a7 (diff)
[4.2.x] Added CVE-2024-56374 to security archive.
Backport of f2a1dcaa53626ff11b921ef142b780a8fd746d32 from main.
Diffstat (limited to 'docs/releases/security.txt')
-rw-r--r--docs/releases/security.txt11
1 files changed, 11 insertions, 0 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt
index 95a6e003b2..f997fe94a3 100644
--- a/docs/releases/security.txt
+++ b/docs/releases/security.txt
@@ -36,6 +36,17 @@ Issues under Django's security process
All security issues have been handled under versions of Django's security
process. These are listed below.
+January 14, 2025 - :cve:`2024-56374`
+------------------------------------
+
+Potential denial-of-service vulnerability in IPv6 validation.
+`Full description
+<https://www.djangoproject.com/weblog/2025/jan/14/security-releases/>`__
+
+* Django 5.1 :commit:`(patch) <4806731e58f3e8700a3c802e77899d54ac6021fe>`
+* Django 5.0 :commit:`(patch) <e8d4a2005955dcf962193600b53bf461b190b455>`
+* Django 4.2 :commit:`(patch) <ad866a1ca3e7d60da888d25d27e46a8adb2ed36e>`
+
December 4, 2024 - :cve:`2024-53907`
------------------------------------