mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00
Code Issues 32 Releases Wiki Activity

Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().

Browse Source 
Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews.

Thanks Wang Baohua for the report.
This commit is contained in:
Mariusz Felisiak
2021-01-22 12:23:18 +01:00
parent 6822aa5c6c
commit 05413afa8c
10 changed files with 77 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/releases/index.txt
View File

@@ -52,6 +52,7 @@ versions of the documentation contain the release notes for any later releases.
.. toctree::
:maxdepth: 1
3.0.12
3.0.11
3.0.10
3.0.9
@@ -70,6 +71,7 @@ versions of the documentation contain the release notes for any later releases.
.. toctree::
:maxdepth: 1
2.2.18
2.2.17
2.2.16
2.2.15