chango.git, branch 1.4.4 django http://cgit.adnoto.dev/chango.git/atom?h=1.4.4 2013-02-19T20:17:23Z [1.4.x] Bump version numbers for security release. 2013-02-19T20:17:23Z James Bennett james@b-list.org 2013-02-19T20:17:23Z urn:sha1:f61f800c29e2b421a00b52c51ec513eee944d5d8 [1.4.x] Update 1.4.4 release notes for all security fixes. 2013-02-19T18:48:46Z Carl Meyer carl@oddbird.net 2013-02-12T22:33:38Z urn:sha1:62d5338bf208aea3e10b020d0cf65bd93dcc253f [1.4.x] Added a default limit to the maximum number of forms in a formset. 2013-02-19T17:37:54Z Aymeric Augustin aymeric.augustin@m4x.org 2013-02-12T10:22:41Z urn:sha1:0cc350a896f70ace18280410eb616a9197d862b0 This is a security fix. Disclosure and advisory coming shortly. [1.4.x] Checked object permissions on admin history view. 2013-02-19T17:37:54Z Carl Meyer carl@oddbird.net 2013-02-04T23:57:59Z urn:sha1:0e7861aec73702f7933ce2a93056f7983939f0d6 This is a security fix. Disclosure and advisory coming shortly. Patch by Russell Keith-Magee. [1.4.x] Restrict the XML deserializer to prevent network and entity-expansion DoS attacks. 2013-02-19T17:37:54Z Carl Meyer carl@oddbird.net 2013-02-12T04:54:53Z urn:sha1:1c60d07ba23e0350351c278ad28d0bd5aa410b40 This is a security fix. Disclosure and advisory coming shortly. [1.4.x] Added ALLOWED_HOSTS setting for HTTP host header validation. 2013-02-19T17:37:54Z Carl Meyer carl@oddbird.net 2013-02-09T18:32:51Z urn:sha1:9936fdb11d0bbf0bd242f259bfb97bbf849d16f8 This is a security fix; disclosure and advisory coming shortly. [1.4.x] Fixed #19824 - Corrected the class described for Field.primary_key from IntegerField to AutoField. 2013-02-16T23:34:34Z Tim Graham timograham@gmail.com 2013-02-16T23:31:54Z urn:sha1:57b62a74cb44ac3cf8b1a9d4cf75bfe953208814 Thanks Keryn Knight. Backport of 218bbef0c4 from master [1.4.x] Fixed #19812 - Removed a duplicate phrase in the widget docs. 2013-02-16T23:25:22Z Tim Graham timograham@gmail.com 2013-02-16T23:23:39Z urn:sha1:83e512fa6e45d2c9e63735bb0c3cd8f1fcd2e616 Thanks diegueus9 for the report and itsallvoodoo for the draft patch. Backport of 7a80904b00 from master [1.4.x] Fixed #19719 - Removed misleading example from ModelForm documentation 2013-02-16T23:09:43Z Alex Hunley phantummm@gmail.com 2013-02-16T19:30:55Z urn:sha1:3d6388941d231e7ae1b5a53cdf2e401b704744b5 Backport of 976dc07baf from master [1.4.x] Fixed #19815 - Removed an unused import in tutorial 3. 2013-02-13T01:04:15Z Tim Graham timograham@gmail.com 2013-02-13T01:04:15Z urn:sha1:9eb7d59665972690bea790fd1ed12eeb142c0ee4 Thanks pedro.calcao@ for the report.