6 Commits

Author	SHA1	Message	Date
Mariusz Felisiak	7cb5712edc	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
Florian Apolloner	76ed1c49f8	Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in django.utils.encoding.uri_to_iri(). ... Thanks to Guido Vranken for initial report.	2019-08-01 09:24:54 +02:00
Mariusz Felisiak	7deeabc7c7	Fixed CVE-2019-14234 -- Protected JSONField/HStoreField key and index lookups against SQL injection. ... Thanks to Sage M. Abdullah for the report and initial patch. Thanks Florian Apolloner for reviews.	2019-08-01 09:24:54 +02:00
Florian Apolloner	4b78420d25	Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in strip_tags() when handling incomplete HTML entities. ... Thanks to Guido Vranken for initial report.	2019-08-01 09:24:54 +02:00
Florian Apolloner	7f65974f82	Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues when truncating HTML. ... Thanks to Guido Vranken for initial report.	2019-08-01 09:24:54 +02:00
Carlton Gibson	f13147c8de	Added stub release notes for security releases.	2019-07-25 10:49:30 +02:00