chango.git, branch 2.2.4 django http://cgit.adnoto.dev/chango.git/atom?h=2.2.4 2019-08-01T08:56:47Z [2.2.x] Bumped version for 2.2.4 release. 2019-08-01T08:56:47Z Carlton Gibson carlton.gibson@noumenal.es 2019-08-01T08:56:47Z urn:sha1:8687fbe034ac5eec20e0948b98eb8a2f0b1431a1 [2.2.x] Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in django.utils.encoding.uri_to_iri(). 2019-07-29T09:06:54Z Florian Apolloner florian@apolloner.eu 2019-07-19T15:04:53Z urn:sha1:cf694e6852b0da7799f8b53f1fb2f7d20cf17534 Thanks to Guido Vranken for initial report. [2.2.x] Fixed CVE-2019-14234 -- Protected JSONField/HStoreField key and index lookups against SQL injection. 2019-07-29T09:06:54Z Mariusz Felisiak felisiak.mariusz@gmail.com 2019-07-22T08:45:26Z urn:sha1:4f5b58f5cd3c57fee9972ab074f8dc6895d8f387 Thanks to Sage M. Abdullah for the report and initial patch. Thanks Florian Apolloner for reviews. [2.2.x] Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in strip_tags() when handling incomplete HTML entities. 2019-07-29T09:06:54Z Florian Apolloner florian@apolloner.eu 2019-07-15T10:00:06Z urn:sha1:e34f3c0e9ee5fc9022428fe91640638bafd4cda7 Thanks to Guido Vranken for initial report. [2.2.X] Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues when truncating HTML. 2019-07-29T09:00:01Z Florian Apolloner florian@apolloner.eu 2019-07-15T09:46:09Z urn:sha1:c3289717c6f21a8cf23daff1c78c0c014b94041f Thanks to Guido Vranken for initial report. [2.2.x] Fixed #30656 -- Added QuerySet.bulk_update() to the database optimization docs. 2019-07-29T08:10:00Z daniel a rios misterrios@gmail.com 2019-07-26T13:12:29Z urn:sha1:f9462f4c82c503fca21fc2af5cb5d6362c36fa83 Backport of 68aeb9016084290aac4f82860e17a9f4e941676e from master [2.2.x] Refs #30656 -- Reorganized bulk methods in the database optimization docs. 2019-07-29T08:09:53Z daniel a rios misterrios@gmail.com 2019-07-26T13:11:48Z urn:sha1:b4139ed6eaa430874360a3a98e85bd2c91e19bc7 Backport of fe33fdc049df75f9dd8e2eecc8c94aefc0132cb8 from master [2.2.x] Added stub release notes for security releases. 2019-07-25T08:50:18Z Carlton Gibson carlton.gibson@noumenal.es 2019-07-25T08:49:30Z urn:sha1:ea57c8a345c73d17d5ac3a504d8f1c1bd47a7572 Backport of f13147c8de725eed7038941758469aeb9bd66503 from master [2.2.x] Fixed #30647 -- Fixed crash of autoreloader when extra directory cannot be resolved. 2019-07-24T12:38:24Z Tom Forbes tom@tomforb.es 2019-07-21T21:28:39Z urn:sha1:4d6449e1258c88b6e4e1ccbb5e84b210371598d2 Backport of fc75694257b5bceab82713f84fe5a1b23d641c3f from master. [2.2.x] Fixed typo in docs/topics/http/sessions.txt. 2019-07-23T13:11:54Z terminator14 terminator14@users.noreply.github.com 2019-07-23T13:10:58Z urn:sha1:61d4a159899358e3570dfc5db039651325b30992 Backport of 8323691de0ba120dbdc8055063574df2b0c0afa4 from master