mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-06-25 05:19:13 +00:00
Code Issues 32 Releases Wiki Activity

[5.2.x] Clarified that only latest dependency versions are valid for security reports.

Browse Source 
Backport of bc1bfe12b613334bd625aeb36fd44af96d186c10 from main.
This commit is contained in:
Jake Howard 2025-06-18 15:04:34 +01:00 committed by Natalia
parent 359af3779a
commit db5da3c91c
2 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/faq/install.txt
View File

@ -57,7 +57,10 @@ Django version Python versions
============== ===============
For each version of Python, only the latest micro release (A.B.C) is officially
supported. You can find the latest micro version for each series on the `Python
supported. Python versions that have reached end-of-life are no longer
maintained by the Python project and therefore should not be used with Django.
You can find the latest supported micro version for each series on the `Python
download page <https://www.python.org/downloads/>`_.
We will support a Python version up to and including the first Django LTS

11
docs/internals/security.txt
View File

@ -55,6 +55,17 @@ set up, run, and reproduce the issue.
Please do not attach screenshots of code.
Use supported versions of dependencies
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Django only :ref:`officially supports <faq-python-version-support>` the latest
micro release (A.B.C) of Python. Vulnerabilities must be reproducible when all
relevant dependencies (not limited to Python) are at supported versions.
For example, vulnerabilities that only occur when Django is run on a version of
Python that is no longer receiving security updates ("end-of-life") are **not
considered valid**, even if that version is listed as supported by Django.
User input must be sanitized
~~~~~~~~~~~~~~~~~~~~~~~~~~~~