chango.git, branch 1.4.12 django http://cgit.adnoto.dev/chango.git/atom?h=1.4.12 2014-04-28T20:28:15Z [1.4.x] Bump version numbers for 1.4.12 bugfix release. 2014-04-28T20:28:15Z James Bennett james@b-list.org 2014-04-28T20:28:15Z urn:sha1:b1b680c8fe3fcfdc934971c9860f0b8644defdc7 [1.4.x] Fixed #22486 -- Restored the ability to reverse views created using functools.partial. 2014-04-23T13:22:02Z Tim Graham timograham@gmail.com 2014-04-23T13:22:02Z urn:sha1:b91c385e324f1cb94d20e2ad146372c259d51d3b Regression in 8b93b31. Thanks rcoup for the report. Backport of 3c06b2f2a3 from master [1.4.x] Post release version bump. 2014-04-22T15:50:20Z Tim Graham timograham@gmail.com 2014-04-22T15:50:20Z urn:sha1:1edb163592a21975d69aaca3215678f192421b71 [1.4.x] Bump version numbers for 1.4.11 security release. 2014-04-21T22:38:26Z James Bennett james@b-list.org 2014-04-21T22:38:26Z urn:sha1:194159ba443645947e1a86bfd12e28dc78022521 [1.4.x] Added information on resolved security issues to release notes. 2014-04-21T22:31:44Z Erik Romijn eromijn@solidlinks.nl 2014-04-21T10:53:34Z urn:sha1:80109083136d7d633810d765b74e4c3018434010 Backport of c07f3e60c2d455e36ba4ac339d4283d32bbc3814 from master [1.4.x] Fixed queries that may return unexpected results on MySQL due to typecasting. 2014-04-21T22:31:44Z Erik Romijn eromijn@solidlinks.nl 2014-04-20T20:32:48Z urn:sha1:aa80f498de6d687e613860933ac58433ab71ea4b This is a security fix. Disclosure will follow shortly. Backport of 75c0d4ea3ae48970f788c482ee0bd6b29a7f1307 from master [1.4.x] Prevented leaking the CSRF token through caching. 2014-04-21T22:31:44Z Aymeric Augustin aymeric.augustin@m4x.org 2014-04-20T20:32:09Z urn:sha1:1170f285ddd6a94a65f911a27788ba49ca08c0b0 This is a security fix. Disclosure will follow shortly. Backport of c083e3815aec23b99833da710eea574e6f2e8566 from master [1.4.x] Fixed a remote code execution vulnerabilty in URL reversing. 2014-04-21T22:31:44Z Tim Graham timograham@gmail.com 2014-04-20T17:35:24Z urn:sha1:c1a8c420fe4b27fb2caf5e46d23b5712fc0ac535 Thanks Benjamin Bach for the report and initial patch. This is a security fix; disclosure to follow shortly. Backport of 8b93b31487d6d3b0fcbbd0498991ea0db9088054 from master [1.4.x] Corrected the section identifier for MySQL unicode reference. 2014-04-21T17:21:14Z Matt Lauber github@mklauber.com 2014-04-21T14:48:33Z urn:sha1:ca3927dfb946cf7de2fbd1d85ce9433f02069eba Backport of b2514c02e1 from master [1.4.x] Fixed random aggregation_regress test_more_more_more() failure 2014-04-19T17:01:52Z Tim Graham timograham@gmail.com 2014-04-19T17:01:52Z urn:sha1:83420e70ef98c015207f8a49bd35ebb098ac6df5 The cause was assuming that an unordered queryset returns the values always in the same order. Backport of 33dd8f544205be923e2a06106909ebcd3583526b