diff options
| author | Tim Graham <timograham@gmail.com> | 2018-08-01 10:51:24 -0400 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2018-08-01 11:07:28 -0400 |
| commit | e7dffda16729e79194813427c775c94f141f127c (patch) | |
| tree | 57e35442217eee02af7caed67ca2852db09a250d /docs | |
| parent | 05b0ae53eaca9312ad40d285390b5b93356c88d8 (diff) | |
[2.0.x] Added CVE-2018-14574 to the security release archive.
Backport of 0006538e53bf11d1de26801b13b78807354de2c8 from master
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/releases/security.txt | 17 |
1 files changed, 15 insertions, 2 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt index 47aef2bb24..f74ec87c7e 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -863,7 +863,7 @@ March 6, 2018 - :cve:`2018-7536` Denial-of-service possibility in ``urlize`` and ``urlizetrunc`` template filters. `Full description -<https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>`_ +<https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>`__ Versions affected ~~~~~~~~~~~~~~~~~ @@ -877,7 +877,7 @@ March 6, 2018 - :cve:`2018-7537` Denial-of-service possibility in ``truncatechars_html`` and ``truncatewords_html`` template filters. `Full description -<https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>`_ +<https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>`__ Versions affected ~~~~~~~~~~~~~~~~~ @@ -885,3 +885,16 @@ Versions affected * Django 2.0 `(patch) <https://github.com/django/django/commit/94c5da1d17a6b0d378866c66b605102c19f7988c>`__ * Django 1.11 `(patch) <https://github.com/django/django/commit/a91436360b79a6ff995c3e5018bcc666dfaf1539>`__ * Django 1.8 `(patch) <https://github.com/django/django/commit/d17974a287a6ea2e361daff88fcc004cbd6835fa>`__ + +August 1, 2018 - :cve:`2018-14574` +---------------------------------- + +Open redirect possibility in ``CommonMiddleware``. `Full description +<https://www.djangoproject.com/weblog/2018/aug/01/security-releases/>`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 2.1 `(patch) <https://github.com/django/django/commit/c4e5ff7fdb5fce447675e90291fd33fddd052b3c>`__ +* Django 2.0 `(patch) <https://github.com/django/django/commit/6fffc3c6d420e44f4029d5643f38d00a39b08525>`__ +* Django 1.11 `(patch) <https://github.com/django/django/commit/d6eaee092709aad477a9894598496c6deec532ff>`__ |