From 429e752c26c79948d8a99927b43e04f3780727bf Mon Sep 17 00:00:00 2001 From: Ryan Petrello Date: Wed, 30 Sep 2020 12:20:43 -0400 Subject: [PATCH] Clarify changelog addition to address CVE-2020-25626 --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ba934f6c98..1a38c00796 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -17,7 +17,7 @@ This is a list of high-level changes for each release of AWX. A full list of com - Fixed a performance issue for playbooks that store large amounts of data using the `set_stats` module - https://github.com/ansible/awx/issues/8006 - Fixed a bug related to AWX's handling of the auth_path argument for the HashiVault KeyValue credential plugin - https://github.com/ansible/awx/pull/7991 - Fixed a bug that broke support for Remote Archive SCM Type project syncs on platforms that utilize Python2 - https://github.com/ansible/awx/pull/8057 -- Updated to the latest version of Django Rest Framework. +- Updated to the latest version of Django Rest Framework to address CVE-2020-25626 - Updated to the latest version of Django to address CVE-2020-24583 and CVE-2020-24584 - Updated to the latest verson of channels_redis to address a bug that slowly causes Daphne processes to leak memory over time - https://github.com/django/channels_redis/issues/212