django.git, branch 4.0.4 django http://cgit.adnoto.dev/django.git/atom?h=4.0.4 2022-04-11T07:05:03Z [4.0.x] Bumped version for 4.0.4 release. 2022-04-11T07:05:03Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-04-11T07:05:03Z urn:sha1:89807fbde8b7b17d00434bc4695535855e96fe77 [4.0.x] Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL. 2022-04-11T07:02:58Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-04-01T11:48:47Z urn:sha1:00b0fc50e1738c7174c495464a5ef069408a4402 Backport of 6723a26e59b0b5429a0c5873941e01a2e1bdbb81 from main. [4.0.x] Fixed CVE-2022-28346 -- Protected QuerySet.annotate(), aggregate(), and extra() against SQL injection in column aliases. 2022-04-11T07:02:14Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-04-01T06:10:22Z urn:sha1:800828887a0509ad1162d6d407e94d8de7eafc60 Thanks Splunk team: Preston Elder, Jacob Davis, Jacob Moore, Matt Hanson, David Briggs, and a security researcher: Danylo Dmytriiev (DDV_UA) for the report. Backport of 93cae5cb2f9a4ef1514cf1a41f714fef08005200 from main. [4.0.x] Fixed #33628 -- Ignored directories with empty names in autoreloader check for template changes. 2022-04-11T06:29:10Z Manel Clos manelclos@gmail.com 2022-04-09T09:36:26Z urn:sha1:78e553b48a728ba68b427a8108e1247e5bb46048 Regression in 68357b2ca9e88c40fc00d848799813241be39129. Backport of 62739b6e2630e37faa68a86a59fad135cc788cd7 from main. [4.0.x] Added stub release notes and release date for 4.0.4, 3.2.13, and 2.2.28. 2022-04-04T08:50:15Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-04-01T06:37:19Z urn:sha1:7700084142bf7644274876eae796beaa5e252613 Backport of 78277faafd38d8360efc1fd0c9c52d7bb5eec002 from main [4.0.x] Fixed #32129 -- Adjusted the docs for session expiry helpers. 2022-03-31T16:37:55Z sarahboyce sarahvboyce95@gmail.com 2022-03-26T19:54:48Z urn:sha1:51374161b003db263068f828537edec50129a098 Updated the docs for `get_session_cookie_age`, `get_expiry_age`, and `get_expiry_date` to clarify their intended usage by session backends when saving the session. Backport of ae506181f7fb9d9e74f4935686540bef29b60255 from main [4.0.x] Fixed #33598 -- Reverted "Removed unnecessary reuse_with_filtered_relation argument from Query methods." 2022-03-30T05:32:38Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-03-30T05:31:56Z urn:sha1:7d540d67a8fb17f820e1657ccb1509af86b27582 Thanks lind-marcus for the report. This reverts commit 0c71e0f9cfa714a22297ad31dd5613ee548db379. Regression in 0c71e0f9cfa714a22297ad31dd5613ee548db379. Backport of fac662f4798f7e4e0ed9be6b4fb4a87a80810a68 from main [4.0.x] Updated Oracle docs links to Oracle 21c. 2022-03-29T07:43:03Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-03-29T07:41:57Z urn:sha1:f62816bfc6a358ea0f04c733a4f56096d9c2405a Backport of 83c803f161044fbfbfcd9a0c94ca93dc131be662 from main [4.0.x] Updated various links to HTTPS and new locations. 2022-03-29T05:46:55Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-03-29T05:46:08Z urn:sha1:0da90533f2bc66e9cf54e9b9795ecbbdc2618bd6 Backport of 010a9d8a4f45252b908337988690c3fad138e334 from main [4.0.x] Corrected models.FileField signature in docs. 2022-03-28T18:29:53Z Sih Sîng-hông薛丞宏 ihcaoe@gmail.com 2022-01-28T06:47:22Z urn:sha1:7f69c0d9f7ab830a69aef3b218d0888118844e61 Backport of d4bf3b4c75c0e1229062ad4c937725931f699fb7 from main