summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
authorNatalia <124304+nessita@users.noreply.github.com>2025-05-07 10:59:55 -0300
committerNatalia <124304+nessita@users.noreply.github.com>2025-05-07 11:25:04 -0300
commit0d5495850a5e4f2aca6dc908d3db2248d96750b2 (patch)
treedd9528c83472e9cf9b6fb50dd0c130173d11b54d /docs
parent9db70760578d508e3d99462938ed06d69d6c6dfc (diff)
[4.2.x] Added CVE-2025-32873 to security archive.
Backport of fdabda4e05587347aeb3382a442d7e77c1a0c3e5 from main.
Diffstat (limited to 'docs')
-rw-r--r--docs/releases/security.txt11
1 files changed, 11 insertions, 0 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt
index acc143770b..9dc7b5c1ba 100644
--- a/docs/releases/security.txt
+++ b/docs/releases/security.txt
@@ -36,6 +36,17 @@ Issues under Django's security process
All security issues have been handled under versions of Django's security
process. These are listed below.
+May 7, 2025 - :cve:`2025-32873`
+-------------------------------
+
+Denial-of-service possibility in `strip_tags()`.
+`Full description
+<https://www.djangoproject.com/weblog/2025/may/07/security-releases/>`__
+
+* Django 5.2 :commit:`(patch) <c9731dc656e533187b021b4d81f8293d6c943a43>`
+* Django 5.1 :commit:`(patch) <0b42f6a528df966729b24ecaaed67f85e5edc3dc>`
+* Django 4.2 :commit:`(patch) <9cd8028f3e38dca8e51c1388f474eecbe7d6ca3c>`
+
March 6, 2025 - :cve:`2025-26699`
---------------------------------