chango.git, branch 1.5.6 django http://cgit.adnoto.dev/chango.git/atom?h=1.5.6 2014-04-21T22:51:51Z [1.5.x] Update for 1.5.6 security release. 2014-04-21T22:51:51Z James Bennett james@b-list.org 2014-04-21T22:51:51Z urn:sha1:486b6f398bba109ba68b2f29c604e2cf13099aab [1.5.x] Added information on resolved security issues to release notes. 2014-04-21T22:31:08Z Erik Romijn eromijn@solidlinks.nl 2014-04-21T10:48:54Z urn:sha1:cebfbcdb862c7800e84d7413afc80de992486c4a Backport of c07f3e60c2d455e36ba4ac339d4283d32bbc3814 from master [1.5.x] Fixed queries that may return unexpected results on MySQL due to typecasting. 2014-04-21T22:31:08Z Erik Romijn eromijn@solidlinks.nl 2014-04-20T20:29:40Z urn:sha1:985434fb1d6bf2335bf96c6ebf91c3674f1f399f This is a security fix. Disclosure will follow shortly. Backport of 75c0d4ea3ae48970f788c482ee0bd6b29a7f1307 from master [1.5.x] Prevented leaking the CSRF token through caching. 2014-04-21T22:31:05Z Aymeric Augustin aymeric.augustin@m4x.org 2014-04-20T20:29:06Z urn:sha1:6872f42757d7ef6a97e0b6ec5db4d2615d8a2bd8 This is a security fix. Disclosure will follow shortly. Backport of c083e3815aec23b99833da710eea574e6f2e8566 from master [1.5.x] Fixed a remote code execution vulnerabilty in URL reversing. 2014-04-21T22:30:57Z Tim Graham timograham@gmail.com 2014-04-20T17:33:59Z urn:sha1:2a5bcb69f42b84464b24b5c835dca6467b6aa7f1 Thanks Benjamin Bach for the report and initial patch. This is a security fix; disclosure to follow shortly. Backport of 8b93b31487d6d3b0fcbbd0498991ea0db9088054 from master [1.5.x] Corrected the section identifier for MySQL unicode reference. 2014-04-21T17:20:56Z Matt Lauber github@mklauber.com 2014-04-21T14:48:33Z urn:sha1:d6c685cc78d6bde96a60d82b9a065db3cd44ac66 Backport of b2514c02e1 from master [1.5.x] Fixed #22471 -- Corrected misprint in i18n docs 2014-04-18T13:16:43Z Erik Romijn eromijn@solidlinks.nl 2014-04-18T13:16:43Z urn:sha1:1997421f8e14641698e67d138121f7bd430d3060 Backport of 54d5c37de6572eae57a66339bb38719e681cee82 from master. [1.5.x] Fixed #22457 -- Fixed contributing guide w/o github set-up 2014-04-16T13:40:32Z Jordi Yeh yehj10@hhmi.org 2014-04-16T13:19:55Z urn:sha1:ec2d456df8a56a3000b991adcd5ce3aede974492 The published commnand was not working when the user did not have the git client set-up with the public-key. Changed the contributing guide to clone it from https instead. Backport of 28102991172ab931d030412275f926c1b05c688d from master [1.5.x] Fixed #22392 -- Corrected deployment instructions for Apache 2.4. 2014-04-15T21:46:01Z Tim Graham timograham@gmail.com 2014-04-15T21:43:29Z urn:sha1:cbc80eef6dea315a056f46d02fb129b068867024 Thanks zjcheah at yahoo.com for the report. Backport of 0f37d2e4c0 from master [1.5.x] Fixed #22419 -- Typo in docs/topics/db/multi-db.txt. 2014-04-10T23:33:50Z Tim Graham timograham@gmail.com 2014-04-10T23:32:20Z urn:sha1:5b2d17d910d84e26ef229f0379bce66979f97e07 Thanks Josh Kupershmidt. Backport of c487b1e230 from master