---
title: "Nótaí scaoilte Django 2.2.26"
version: 6.1
locale: ga
source: https://docs.djangoproject.com/ga/6.1/releases/2.2.26/
canonical: https://djangodocs.dev/ga/6.1/releases/2.2.26/
---
# Nótaí scaoilte Django 2.2.26

*4 Eanáir, 2022*

Socraíonn Django 2.2.26 saincheist slándála amháin le déine “meánach” agus dhá shaincheist slándála le déine “íseal” i 2.2.25.

## CVE-2021-45115: Féidearthacht seirbhíse a dhiúltú i `UserAttributeSimilarityValidator`

[`UserAttributeSimilarityValidator`](/ga/6.1/topics/auth/passwords/#django.contrib.auth.password_validation.UserAttributeSimilarityValidator) incurred significant overhead
evaluating submitted password that were artificially large in relative to the
comparison values. On the assumption that access to user registration was
unrestricted this provided a potential vector for a denial-of-service attack.

D'fhonn an cheist seo a mhaolú, déanann UserAttributeSimilarityValidator\` neamhaird anois ar luachanna réasúnta fada.

This issue has severity "medium" according to the [Django security policy](/ga/6.1/internals/security/#severity-levels).

## CVE-2021-45116: Nochtadh faisnéise féideartha i scagaire teimpléad dictsort\`

Mar gheall ar loighic réitigh athraitheach Teanga Teanga Teimpléad Django a ghiaráil, d'fhéadfadh an scagaire teimpléad:tfilter: dictsort leochaileach maidir le nochtadh faisnéise nó glaonna modh neamhbheartaithe, má chuirtear eochair deartha go cuí.

D'fhonn an fhéidearthacht seo a sheachaint, oibríonn `dictsort` anois le loighic réitigh srianta, nach nglacfaidh modhanna, ná ní cheadóidh innéacsú ar fhoclóirí.

Mar mheabhrúchán, ba chóir gach ionchur úsáideora gan iontaofa a bhailíochtú sula n-úsáidtear é.

This issue has severity "low" according to the [Django security policy](/ga/6.1/internals/security/#severity-levels).

## CVE-2021-45452: Aistriú féideartha stiúrthóireachta trí Storage.save () \`\`

Ceadaíodh Storage.save () aistriú stiúrthóireachta má chuirtear ainmneacha comhaid déanta go cuí á rith go díreach.

This issue has severity "low" according to the [Django security policy](/ga/6.1/internals/security/#severity-levels).