diff options
| author | Natalia <124304+nessita@users.noreply.github.com> | 2023-10-04 13:05:00 -0300 |
|---|---|---|
| committer | Natalia <124304+nessita@users.noreply.github.com> | 2023-10-04 13:09:25 -0300 |
| commit | 9962f94a97cc85c79b63f072b0c20735dd56e0f3 (patch) | |
| tree | 327789dd4321d24a6c6615cce0f516066a1d07e4 /docs/releases/security.txt | |
| parent | b2d95bb3013a82ca7cc3e32525b4d1e99fb255d2 (diff) | |
[4.2.x] Added CVE-2023-43665 to security archive.
Backport of 4e790271e3e65c9ad037b347a34fa95e11982228 from main
Diffstat (limited to 'docs/releases/security.txt')
| -rw-r--r-- | docs/releases/security.txt | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt index 34394c50b0..6fdee8bf57 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -36,6 +36,17 @@ Issues under Django's security process All security issues have been handled under versions of Django's security process. These are listed below. +October 4, 2023 - :cve:`2023-43665` +------------------------------------- + +Denial-of-service possibility in ``django.utils.text.Truncator``. +`Full description +<https://www.djangoproject.com/weblog/2023/oct/04/security-releases/>`__ + +* Django 4.2 :commit:`(patch) <be9c27c4d18c2e6a5be8af4e53c0797440794473>` +* Django 4.1 :commit:`(patch) <c7b7024742250414e426ad49fb80db943e7ba4e8>` +* Django 3.2 :commit:`(patch) <ccdade1a0262537868d7ca64374de3d957ca50c5>` + September 4, 2023 - :cve:`2023-41164` ------------------------------------- |