diff --git a/docs/releases/security.txt b/docs/releases/security.txt index 87dd512eb8..72c2253fda 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -1244,3 +1244,45 @@ Versions affected * Django 3.2 :commit:`(patch) <333c65603032c377e682cdbd7388657a5463a05a>` * Django 3.1 :commit:`(patch) <22bd17488159601bf0741b70ae7932bffea8eced>` * Django 2.2 :commit:`(patch) <7cf7d74e8a754446eeb85cacf2fef1247e0cb6d7>` + +January 4, 2022 - :cve:`2021-45115` +------------------------------------ + +Denial-of-service possibility in ``UserAttributeSimilarityValidator``. `Full +description +`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 4.0 :commit:`(patch) ` +* Django 3.2 :commit:`(patch) ` +* Django 2.2 :commit:`(patch) <2135637fdd5ce994de110affef9e67dffdf77277>` + +January 4, 2022 - :cve:`2021-45116` +------------------------------------ + +Potential information disclosure in ``dictsort`` template filter. `Full +description +`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 4.0 :commit:`(patch) <2a8ec7f546d6d5806e221ec948c5146b55bd7489>` +* Django 3.2 :commit:`(patch) ` +* Django 2.2 :commit:`(patch) ` + +January 4, 2022 - :cve:`2021-45452` +------------------------------------ + +Potential directory-traversal via ``Storage.save()``. `Full description +`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 4.0 :commit:`(patch) ` +* Django 3.2 :commit:`(patch) <8d2f7cff76200cbd2337b2cf1707e383eb1fb54b>` +* Django 2.2 :commit:`(patch) <4cb35b384ceef52123fc66411a73c36a706825e1>` +