django.git/docs/releases/3.0.4.txt, branch main

Fixed CVE-2020-9402 -- Properly escaped tolerance parameter in GIS functions and aggregates on Oracle.

2020-03-04T08:04:50Z

Thanks to Norbert Szetei for the report.

Fixed #31150 -- Included subqueries that reference related fields in GROUP BY clauses.

2020-03-03T10:25:37Z

Thanks Johannes Hoppe for the report. Regression in fb3f034f1c63160c0ff13c609acd01c18be12f80. Co-authored-by: Simon Charette

Fixed #31312 -- Properly ordered temporal subtraction params on MySQL.

2020-02-27T07:50:55Z

Regression in 9bcbcd599abac91ea853b2fe10b784ba32df043e. Thanks rick2ricks for the report.

Fixed #31271 -- Preserved ordering when unifying query parameters on Oracle.

2020-02-18T10:45:12Z

This caused misplacing parameters in logged SQL queries. Regression in 79065b55a70cd220820a260a1c54851b7be0615a. Thanks Hans Aarne Liblik for the report.

Fixed #31246 -- Fixed locking models in QuerySet.select_for_update(of=()) for related fields and parent link fields with multi-table inheritance.

2020-02-11T19:43:57Z

Partly regression in 0107e3d1058f653f66032f7fd3a0bd61e96bf782.

Fixed #31240 -- Properly closed FileResponse when wsgi.file_wrapper is used.

2020-02-11T19:39:12Z

Thanks to Oskar Persson for the report.

Fixed #31253 -- Fixed data loss possibility when using caching from async code.

2020-02-11T08:09:25Z

Case missed in a415ce70bef6d91036b00dd2c8544aed7aeeaaed.

Added "Bugfixes" section to release notes for 3.0.4.

2020-02-10T07:14:58Z

Added stub release notes for 3.0.4.

2020-02-03T09:23:54Z