Fabrice Fontaine
f541ba0cff
Fixes:
- CVE-2021-45115: Denial-of-service possibility in
UserAttributeSimilarityValidator
- CVE-2021-45116: Potential information disclosure in dictsort template
filter
- CVE-2021-45452: Potential directory-traversal via Storage.save()
https://www.djangoproject.com/weblog/2022/jan/04/security-releases
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
(cherry picked from commit a17d4aba54)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>