chango.git, branch 3.2.17 django http://cgit.adnoto.dev/chango.git/atom?h=3.2.17 2023-02-01T08:58:36Z [3.2.x] Bumped version for 3.2.17 release. 2023-02-01T08:58:36Z Mariusz Felisiak felisiak.mariusz@gmail.com 2023-02-01T08:58:36Z urn:sha1:aed1bb56d118937d5d6f3ec72f170779dd8c74cd [3.2.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language. 2023-02-01T08:48:18Z Nick Pope nick@nickpope.me.uk 2023-01-25T11:21:48Z urn:sha1:c7e0151fdf33e1b11d488b6f67b94fdf3a30614a The parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. Accept-Language headers are now limited to a maximum length in order to avoid this issue. [3.2.x] Fixed inspectdb.tests.InspectDBTestCase.test_custom_fields() on SQLite 3.37+. 2023-01-31T14:32:01Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-12-09T19:24:38Z urn:sha1:9da46345d83e5d9ecb60512efb2d2e0b2b02b974 Use FlexibleFieldLookupDict which is case-insensitive mapping because SQLite 3.37+ returns some data type names upper-cased e.g. TEXT. Backport of 974e3b8750fe96c16c9c0b115a72ee4a2171df34 from main [3.2.x] Removed 'tests' path prefix in a couple tests. 2023-01-31T14:28:16Z Tim Graham timograham@gmail.com 2022-05-02T01:44:04Z urn:sha1:4c2b26174f044adc4a6461154385720479eaee55 Backport of 694cf458f16b8d340a3195244196980b2dec34fd from main. [3.2.x] Adjusted release notes for 3.2.17. 2023-01-25T11:29:59Z Carlton Gibson carlton.gibson@noumenal.es 2023-01-25T11:26:00Z urn:sha1:d21543182d2cb9947650ecc48c068d1bfb7d0311 Backport of d8e1442ce2c56282785dd806e5c1147975e8c857 from main [3.2.x] Added stub release notes for 3.2.17. 2023-01-25T11:02:29Z Carlton Gibson carlton.gibson@noumenal.es 2023-01-25T10:57:04Z urn:sha1:4e31d3ea55315811db00f3f0d5c677e2344c2f5d Backport of 1df963ad2476726d63be132c0cee47e07b8250d7 from main [3.2.x] Corrected passenv value for tox 4.0.6+. 2023-01-25T05:12:18Z Stephen 101494292+stephenatgithub@users.noreply.github.com 2023-01-25T05:09:57Z urn:sha1:238e8898ac0486f60ca3567d2459cda1d51912f3 Backport of 34b328814976a2e2f7907361a494202763649f3f from main [3.2.x] Disabled auto-created table of contents entries on Sphinx 5.2+. 2022-12-29T05:15:37Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-12-29T05:07:51Z urn:sha1:b381ab4906cdff0ebb4e1c6c8e30996f24be6829 Auto-created table of contents entries for all domain objects (e.g. functions, classes, attributes, etc.) were added in Sphinx 5.2, see https://github.com/sphinx-doc/sphinx/issues/6316. An option to control new table of contents entries was added in Sphinx 5.2.3, see https://github.com/sphinx-doc/sphinx/pull/10886. Backport of 279967ec859a9a5240318cf29a077539b0e3139f from main [3.2.x] Removed obsolete doc reference to asyncio.iscoroutinefunction. 2022-10-29T11:36:23Z Nick Pope nick@nickpope.me.uk 2022-10-29T11:34:22Z urn:sha1:f6f0699d01f5840437bfd236c76c797943ef8edc Backport of 970f61fefb148284fb2af63b5cc844279254111a from main [3.2.x] Added CVE-2022-36359 to security archive. 2022-10-04T08:13:25Z Carlton Gibson carlton.gibson@noumenal.es 2022-10-04T08:12:11Z urn:sha1:accdd0576d50b4696378ed1ab651c20affcae08b Backport of 93d4c9ea1de24eb391cb2b3561b6703fd46374df from main