From efebcc429f048493d6bc710399e65d98081eafd5 Mon Sep 17 00:00:00 2001 From: Mariusz Felisiak Date: Thu, 6 May 2021 09:58:24 +0200 Subject: [PATCH] Added CVE-2021-32052 to security archive. --- docs/releases/security.txt | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/docs/releases/security.txt b/docs/releases/security.txt index 847abd9cac..4f755f4381 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -36,6 +36,20 @@ Issues under Django's security process All security issues have been handled under versions of Django's security process. These are listed below. +May 6, 2021 - :cve:`2021-32052` +------------------------------- + +Header injection possibility since ``URLValidator`` accepted newlines in input +on Python 3.9.5+. `Full description +`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 3.2 :commit:`(patch) <2d2c1d0c97832860fbd6597977e2aae17dd7e5b2>` +* Django 3.1 :commit:`(patch) ` +* Django 2.2 :commit:`(patch) ` + May 4, 2021 - :cve:`2021-31542` -------------------------------