django.git/docs/releases/2.0.3.txt, branch main django http://cgit.adnoto.dev/django.git/atom?h=main 2018-03-06T13:30:40Z Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in django.utils.text.Truncator. 2018-03-06T13:30:40Z Tim Graham timograham@gmail.com 2018-02-24T21:22:43Z urn:sha1:97b7dd59bb8d6163239061e2022153c3415d146d Thanks James Davis for suggesting the fix. Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and urlizetrunc template filters. 2018-03-06T13:30:40Z Tim Graham timograham@gmail.com 2018-02-24T16:30:11Z urn:sha1:8618271caa0b09daba39ff3b46567d33ae1e1d3a Thanks Florian Apolloner for assisting with the patch. Added stub release notes for security releases. 2018-03-06T13:30:34Z Tim Graham timograham@gmail.com 2018-02-25T00:39:17Z urn:sha1:4d2a2c83c7e8171522469908e8be8342ccb02052 Fixed #29176 -- Fixed AbstractBaseUser.normalize_username() crash if username isn't a string. 2018-03-02T16:32:53Z Christophe Mehay cmehay@student.42.fr 2018-03-01T14:26:40Z urn:sha1:40bac28faabbacd0875e59455cd80fb1dbb16966 Fixed #29172 -- Fixed crash with Window expression in a subquery. 2018-03-01T15:24:14Z Tomáš Ehrlich tomas.ehrlich@gmail.com 2018-03-01T07:55:05Z urn:sha1:fa352626c2a80bcdcd0fc6492b5fd5130490f05e Updated translations from Transifex 2018-02-28T19:06:52Z Claude Paroz claude@2xlibre.net 2018-02-26T20:11:53Z urn:sha1:75527c0f8360ae3555fcf67ce19b4cb910b69b9d Forward port of 2126e9317e80a7d4c42e033dd33d7e3378fdfcf8 from stable/2.0.x. Fixed #29166 -- Fixed crash in When() expression with a list argument. 2018-02-28T17:05:23Z Mariusz Felisiak felisiak.mariusz@gmail.com 2018-02-28T17:05:23Z urn:sha1:54f80430be4a9adf1fc00b4ca17547415fafc69b Thanks Matthew Pava for the report and Tim Graham and Carlton Gibson for reviews. Regression in 19b2dfd1bfe7fd716dd3d8bfa5f972070d83b42f. Fixed #29125 -- Made Q.deconstruct() deterministic with multiple keyword arguments. 2018-02-12T19:52:32Z Tim Graham timograham@gmail.com 2018-02-12T19:00:29Z urn:sha1:b95c49c954e3b75678bb258e9fb2ec30d0d960bb Fixed #29118 -- Fixed crash with QuerySet.order_by(Exists(...)). 2018-02-10T23:35:57Z Raphael Gaschignard r.gaschignard@gmail.com 2018-02-07T03:09:43Z urn:sha1:bf26f66029bca94b007a2452679ac004598364a6 Fixed #29109 -- Fixed the admin time picker widget for the Thai locale. 2018-02-10T21:05:41Z Manatsawin Hanmongkolchai manatsawin@gmail.com 2018-02-10T21:05:41Z urn:sha1:1a1264f1494976c562c7cb832fe47f3e1e765b8f