Commit Graph

6 Commits

Author SHA1 Message Date
Carlton Gibson dfcecb6e6c [2.2.x] Added release date for 2.2.16.
Backport of 976e2b7420 from master
2020-09-01 10:00:28 +02:00
Mariusz Felisiak a3aebfdc81 [2.2.x] Fixed CVE-2020-24584 -- Fixed permission escalation in intermediate-level directories of the file system cache on Python 3.7+.
Backport of f56b57976133129b0b351a38bba4ac882badabf0 from master.
2020-08-25 11:09:40 +02:00
Mariusz Felisiak 375657a71c [2.2.x] Fixed CVE-2020-24583, #31921 -- Fixed permissions on intermediate-level static and storage directories on Python 3.7+.
Thanks WhiteSage for the report.

Backport of ea0febbba531a3ecc8c77b570efbfb68ca7155db from master.
2020-08-25 10:59:42 +02:00
Mariusz Felisiak dc39e62e6b [2.2.x] Refs #31863 -- Added release notes for 94ea79be13.
Backport of 21768a99f4 from master
2020-08-13 16:32:58 +02:00
Daniel Hillier 839f906a23 [2.2.x] Fixed #31866 -- Fixed locking proxy models in QuerySet.select_for_update(of=()).
Backport of 60626162f7 from master
2020-08-11 12:33:18 +02:00
Mariusz Felisiak 30706246e7 [2.2.x] Added stub release notes for 2.2.16.
Backport of 8a5683b6b2 from master
2020-08-11 11:14:35 +02:00