Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

🚨 Security fix | Wagtail 6.1.3 & Django 4.2.14 #281

Merged
merged 3 commits into from
Aug 1, 2024
Merged

🚨 Security fix | Wagtail 6.1.3 & Django 4.2.14 #281

merged 3 commits into from
Aug 1, 2024

Conversation

engineervix
Copy link
Member

@engineervix engineervix commented Jul 12, 2024 •
edited
Loading

This PR

  • updates wagtail from 6.1.2 to 6.1.3, which was released on Thursday July 11th 2024 to address a denial-of-service vulnerability in Wagtail.
  • updates django from 4.2.13 to 4.2.14, which was released on Tuesday July 9th, 2024 to address two security issues with severity “moderate” and two security issues with severity “low” in 4.2.13.

Monday board

More details on the Wagtail update
More details on the Django update

@engineervix engineervix requested a review from nickmoreton July 12, 2024 16:28
@engineervix engineervix self-assigned this Jul 12, 2024
zerolab
zerolab approved these changes Jul 12, 2024
View reviewed changes
Copy link
Member

@zerolab zerolab left a comment •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Neither are critical for us, but it doesn't hurt to have them in.
Thank you @engineervix

nickmoreton
nickmoreton approved these changes Jul 15, 2024
View reviewed changes
Copy link
Collaborator

@nickmoreton nickmoreton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@engineervix engineervix merged commit d274472 into main Aug 1, 2024
2 checks passed
@engineervix engineervix deleted the support-django-wagtail-security-updates branch August 1, 2024 11:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@nickmoreton nickmoreton nickmoreton approved these changes

@zerolab zerolab zerolab approved these changes

Assignees

@engineervix engineervix

Labels
on staging Support Task
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@engineervix @zerolab @nickmoreton @helenb