django.git, branch 1.11.29 django http://cgit.adnoto.dev/django.git/atom?h=1.11.29 2020-03-04T08:49:38Z [1.11.x] Bumped version for 1.11.29 release. 2020-03-04T08:49:38Z Mariusz Felisiak felisiak.mariusz@gmail.com 2020-03-04T08:49:38Z urn:sha1:f1e3017aeaeddc590dcf2cf88511f3a726da73ca [1.11.x] Fixed CVE-2020-9402 -- Properly escaped tolerance parameter in GIS functions and aggregates on Oracle. 2020-03-04T08:47:05Z Mariusz Felisiak felisiak.mariusz@gmail.com 2020-02-24T13:46:28Z urn:sha1:02d97f3c9a88adc890047996e5606180bd1c6166 Thanks to Norbert Szetei for the report. [1.11.x] Pinned PyYAML < 5.3 in test requirements. 2020-02-04T09:06:07Z Mariusz Felisiak felisiak.mariusz@gmail.com 2020-02-04T08:48:29Z urn:sha1:e6438335626cb7e662dd015485a23cfc5721ad72 PyYAML 5.3+ doesn't support Python 3.4. [1.11.x] Added CVE-2020-7471 to security archive. 2020-02-03T09:15:26Z Carlton Gibson carlton.gibson@noumenal.es 2020-02-03T09:11:34Z urn:sha1:d0e3eb8e827355462a2d90660079234796d94ab0 Backport of d8b2ccbbb846328a0938347dc70cb2e603164d9a from master [1.11.x] Post-release version bump. 2020-02-03T08:27:14Z Carlton Gibson carlton.gibson@noumenal.es 2020-02-03T08:27:14Z urn:sha1:9a62ed5d5f827b44e8c95559c60fb28fb444e3ad [1.11.x] Bumped version for 1.11.28 release. 2020-02-03T08:16:55Z Carlton Gibson carlton.gibson@noumenal.es 2020-02-03T08:16:55Z urn:sha1:e09f09b965ef47ffd99abd2c26ba7416751cffa6 [1.11.x] Fixed CVE-2020-7471 -- Properly escaped StringAgg(delimiter) parameter. 2020-01-26T18:02:04Z Carlton Gibson carlton.gibson@noumenal.es 2020-01-22T08:03:27Z urn:sha1:001b0634cd309e372edb6d7d95d083d02b8e37bd [1.11.x] Fixed timezones tests for PyYAML 5.3+. 2020-01-07T08:56:12Z Mariusz Felisiak felisiak.mariusz@gmail.com 2020-01-07T08:54:22Z urn:sha1:7fd1ca3ef63e5e834205a8208f4dc17d80f9a417 Backport of 8be477be5c1a4afc9ad00bb58a324f637e018c0f from master [1.11.x] Added CVE-2019-19844 to the security archive. 2019-12-18T09:40:52Z Mariusz Felisiak felisiak.mariusz@gmail.com 2019-12-18T09:36:22Z urn:sha1:121115d2c291b3969ac00ca62253f23513481739 Backport of 5a2b9f0b546222e928df91310acb9cf363a6c920 from master [1.11.x] Post-release version bump. 2019-12-18T08:35:18Z Mariusz Felisiak felisiak.mariusz@gmail.com 2019-12-18T08:35:18Z urn:sha1:2c4fb9a35db575ec56207446d782b8f450a2b4e7