chango.git, branch 1.6.3 django http://cgit.adnoto.dev/chango.git/atom?h=1.6.3 2014-04-21T23:10:57Z [1.6.x] Update for 1.6.3 security release. 2014-04-21T23:10:57Z James Bennett james@b-list.org 2014-04-21T23:10:57Z urn:sha1:3f1abbfc4097e1b9bace016258d8870f14ba8557 [1.6.x] Added information on resolved security issues to release notes. 2014-04-21T22:30:27Z Erik Romijn eromijn@solidlinks.nl 2014-04-21T10:46:00Z urn:sha1:d63bfb14dd1a35672fff18cd41f386330e109f8e Backport of c07f3e60c2d455e36ba4ac339d4283d32bbc3814 from master [1.6.x] Fixed queries that may return unexpected results on MySQL due to typecasting. 2014-04-21T22:30:27Z Erik Romijn eromijn@solidlinks.nl 2014-04-20T20:28:01Z urn:sha1:5f0829a27e85d89ad8c433f5c6a7a7d17c9e9292 This is a security fix. Disclosure will follow shortly. Backport of 75c0d4ea3ae48970f788c482ee0bd6b29a7f1307 from master [1.6.x] Prevented leaking the CSRF token through caching. 2014-04-21T22:30:27Z Aymeric Augustin aymeric.augustin@m4x.org 2014-04-20T20:27:33Z urn:sha1:d63e20942f3024f24cb8cd85a49461ba8a9b6736 This is a security fix. Disclosure will follow shortly. Backport of c083e3815aec23b99833da710eea574e6f2e8566 from master [1.6.x] Fixed a remote code execution vulnerabilty in URL reversing. 2014-04-21T22:30:27Z Tim Graham timograham@gmail.com 2014-04-20T17:31:53Z urn:sha1:4352a50871e239ebcdf64eee6f0b88e714015c1b Thanks Benjamin Bach for the report and initial patch. This is a security fix; disclosure to follow shortly. Backport of 8b93b31487d6d3b0fcbbd0498991ea0db9088054 from master [1.6.x] Corrected the section identifier for MySQL unicode reference. 2014-04-21T17:20:51Z Matt Lauber github@mklauber.com 2014-04-21T14:48:33Z urn:sha1:25adac9b42e65caa5d2d42b6322e59ffb48df775 Backport of b2514c02e1 from master [1.6.x] Moved RemoteUserBackend documentation to reference guide. 2014-04-18T20:11:10Z Tim Graham timograham@gmail.com 2014-04-18T20:06:26Z urn:sha1:1b43131b5d65060a7e067fbf6167517c559d2807 Backport of 26d118c3fe from master [1.6.x] Fixed #22458 -- Added a note about MySQL utf8_unicode_ci collation 2014-04-18T19:11:14Z Moayad Mardini moayad.m@gmail.com 2014-04-18T16:41:29Z urn:sha1:b6863879e1cf20acdecb3606da8fe66b486836cf Thanks tobami at gmail.com for the report. Backport of 11ac50b18e from master [1.6.x] Fixed #22473 -- Emphasized that Model.clean() is not called from Model.save(). 2014-04-18T19:03:30Z Tim Graham timograham@gmail.com 2014-04-18T19:00:26Z urn:sha1:839deb7a77a2321309da944031b7316322a0afbb Backport of b43bbd6d39 from master [1.6.x] Added some missing items to the 1.6.3 release notes. 2014-04-18T14:32:53Z Tim Graham timograham@gmail.com 2014-04-18T14:32:14Z urn:sha1:9e28bfb3240b6fc11384139616a9024db835ccda Backport of c2b269df6e from master