django.git, branch 3.1.1 django http://cgit.adnoto.dev/django.git/atom?h=3.1.1 2020-09-01T08:06:10Z [3.1.x] Bumped version for 3.1.1 release. 2020-09-01T08:06:10Z Carlton Gibson carlton.gibson@noumenal.es 2020-09-01T08:06:10Z urn:sha1:f33c2528f4f699086ed97330ff2f010e63d5702b [3.1.x] Added release date for 3.1.1, 3.0.10, and 2.2.16. 2020-09-01T07:57:12Z Carlton Gibson carlton.gibson@noumenal.es 2020-09-01T07:56:42Z urn:sha1:1ef38005a737d28c0e0bd4b99787a261a61b97fa Backport of 976e2b7420c0f7e3060a13792b97511a9aad31d7 from master [3.1.x] Fixed CVE-2020-24584 -- Fixed permission escalation in intermediate-level directories of the file system cache on Python 3.7+. 2020-09-01T07:35:05Z Mariusz Felisiak felisiak.mariusz@gmail.com 2020-08-21T10:43:45Z urn:sha1:2b099caa5923afa8cfb5f1e8c0d56b6e0e81915b Backport of f56b57976133129b0b351a38bba4ac882badabf0 from master. [3.1.x] Fixed CVE-2020-24583, #31921 -- Fixed permissions on intermediate-level static and storage directories on Python 3.7+. 2020-09-01T07:35:05Z Mariusz Felisiak felisiak.mariusz@gmail.com 2020-08-21T09:44:46Z urn:sha1:934430d22aa5d90c2ba33495ff69a6a1d997d584 Thanks WhiteSage for the report. Backport of ea0febbba531a3ecc8c77b570efbfb68ca7155db from master. [3.1.x] Fixed #31901 -- Prevented content overflowing in the admin changelist with navigation sidebar. 2020-09-01T06:19:12Z 007gzs 007gzs@gmail.com 2020-08-19T00:40:32Z urn:sha1:dfa31f8e87b11c819d6564f925743c0978ea3351 Backport of 2bc38bc7cae002f949157d95e3f0c19ea6b8ca5c from master [3.1.x] Corrected note about long names in search docs. 2020-08-31T20:37:20Z Abdullah Dursun adursuns@gmail.com 2020-08-31T20:36:25Z urn:sha1:42f8c085a602fd897b53eaaef0b90e1ede66d8cc Backport of fcad0b132427847d6db2008f00fbe45a7b45cad3 from master [3.1.x] Fixed #31934 -- Added note about the default of SameSite cookie flag in modern browsers. 2020-08-31T10:33:17Z Hasan Ramezani hasan.r67@gmail.com 2020-08-24T12:00:11Z urn:sha1:eda59ba2ec9cee3e11a938171fdc93ea058e9dc9 Backport of 70731fc6feeb40eab535781e938b0e67ff0077ad from master [3.1.x] Fixed #31952 -- Fixed EmptyFieldListFilter crash with reverse relationships. 2020-08-31T08:40:21Z Federico Jaramillo Martínez federicojaramillom@gmail.com 2020-08-27T20:23:42Z urn:sha1:c4e5384e739a1f79fe9f7d78431e3b48fcb09f48 Thanks dacotagh for the report. Backport of 179d9dc0c2265176f9f7062a1d98dc44d896f91f from master [3.1.x] Fixed #31965 -- Adjusted multi-table fast-deletion on MySQL/MariaDB. 2020-08-31T07:22:59Z Simon Charette charette.s@gmail.com 2020-08-30T07:00:15Z urn:sha1:2986ec031d311891af8c59c845ce3b5e46d17a76 The optimization introduced in 7acef095d73 did not properly handle deletion involving filters against aggregate annotations. It initially was surfaced by a MariaDB test failure but misattributed to an undocumented change in behavior that resulted in the systemic generation of poorly performing database queries in 5b83bae031. Thanks Anton Plotkin for the report. Refs #23576. Backport of f6405c0b8ef7aff513b105c1da68407a881a3671 from master [3.1.x] Fixed #31956 -- Fixed crash of ordering by JSONField with a custom decoder on PostgreSQL. 2020-08-28T17:12:02Z Mariusz Felisiak felisiak.mariusz@gmail.com 2020-08-28T05:56:04Z urn:sha1:655e1ce6b1ca8df71518060ae770c3ee647b9801 Thanks Marc Debureaux for the report. Thanks Simon Charette, Nick Pope, and Adam Johnson for reviews. Backport of 0be51d2226fce030ac9ca840535a524f41e9832c from master