diff options
| author | Tim Graham <timograham@gmail.com> | 2018-03-06 12:59:36 -0500 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2018-03-06 13:10:07 -0500 |
| commit | 6a0dc2176f4ebf907e124d433411e52bba39a28e (patch) | |
| tree | 718cfe57ab0930d0f9c9e46deed51caa3231b676 | |
| parent | 1bdd9e5f5d991e0ff2baff97f7545d397bc39158 (diff) | |
| download | django-stable/1.8.x.tar.gz | |
[1.8.x] Added CVE-2018-7536,7 to the security release archive.stable/1.8.x
Backport of 5bbbdd26d1ea4f3bb164ad64b0d0d458d8bfdd02 from master
| -rw-r--r-- | docs/releases/security.txt | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt index 357ab39a2f..47aef2bb24 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -857,3 +857,31 @@ Versions affected * Django 2.0 `(patch) <https://github.com/django/django/commit/c37bb28677295f6edda61d8ac461014ef0d3aeb2>`__ * Django 1.11 `(patch) <https://github.com/django/django/commit/57b95fedad5e0b83fc9c81466b7d1751c6427aae>`__ + +March 6, 2018 - :cve:`2018-7536` +-------------------------------- + +Denial-of-service possibility in ``urlize`` and ``urlizetrunc`` template +filters. `Full description +<https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>`_ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 2.0 `(patch) <https://github.com/django/django/commit/e157315da3ae7005fa0683ffc9751dbeca7306c8>`__ +* Django 1.11 `(patch) <https://github.com/django/django/commit/abf89d729f210c692a50e0ad3f75fb6bec6fae16>`__ +* Django 1.8 `(patch) <https://github.com/django/django/commit/1ca63a66ef3163149ad822701273e8a1844192c2>`__ + +March 6, 2018 - :cve:`2018-7537` +-------------------------------- + +Denial-of-service possibility in ``truncatechars_html`` and +``truncatewords_html`` template filters. `Full description +<https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>`_ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 2.0 `(patch) <https://github.com/django/django/commit/94c5da1d17a6b0d378866c66b605102c19f7988c>`__ +* Django 1.11 `(patch) <https://github.com/django/django/commit/a91436360b79a6ff995c3e5018bcc666dfaf1539>`__ +* Django 1.8 `(patch) <https://github.com/django/django/commit/d17974a287a6ea2e361daff88fcc004cbd6835fa>`__ |