summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2019-10-01[1.11.x] Bumped version for 1.11.25 release.1.11.25Carlton Gibson
2019-09-16[1.11.x] Fixed #30769 -- Fixed a crash when filtering against a subquery ↵Simon Charette
JSON/HStoreField annotation. This was a regression introduced by 7deeabc7c7526786df6894429ce89a9c4b614086 to address CVE-2019-14234. Thanks Tim Kleinschmidt for the report and Mariusz for the tests. Backport of 6c3dfba89215fc56fc27ef61829a6fff88be4abb from master.
2019-09-02[1.11.x] Post-release version bump.Mariusz Felisiak
2019-09-02[1.11.x] Bumped version for 1.11.24 release.1.11.24Mariusz Felisiak
2019-08-14[1.11.x] Fixed #30672 -- Fixed crash of JSONField/HStoreField key transforms ↵Mariusz Felisiak
on expressions with params. Regression in 4f5b58f5cd3c57fee9972ab074f8dc6895d8f387. Thanks Florian Apolloner for the report and helping with tests. Backport of 1f8382d34d54061eddc41df6994e20ee38c60907 from master.
2019-08-01[1.11.x] Post-release version bump.Carlton Gibson
2019-08-01[1.11.x] Bumped version for 1.11.23 release.1.11.23Carlton Gibson
2019-07-31[1.11.x] Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in ↵Florian Apolloner
django.utils.encoding.uri_to_iri(). Thanks to Guido Vranken for initial report.
2019-07-31[1.11.x] Fixed CVE-2019-14234 -- Protected JSONField/HStoreField key and ↵Mariusz Felisiak
index lookups against SQL injection. Thanks to Sage M. Abdullah for the report and initial patch. Thanks Florian Apolloner for reviews.
2019-07-29[1.11.x] Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in ↵Florian Apolloner
strip_tags() when handling incomplete HTML entities. Thanks to Guido Vranken for initial report.
2019-07-29[1.11.X] Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues ↵Florian Apolloner
when truncating HTML. Thanks to Guido Vranken for initial report.
2019-07-01[1.11.x] Post-release version bump.Mariusz Felisiak
2019-07-01[1.11.x] Bumped version for 1.11.22 release.1.11.22Mariusz Felisiak
2019-07-01[1.11.x] Fixed CVE-2019-12781 -- Made HttpRequest always trust ↵Carlton Gibson
SECURE_PROXY_SSL_HEADER if set. An HTTP request would not be redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings were used if the proxy connected to Django via HTTPS. HttpRequest.scheme will now always trust the SECURE_PROXY_SSL_HEADER if set, rather than falling back to the request scheme when the SECURE_PROXY_SSL_HEADER did not have the secure value. Thanks to Gavin Wahl for the report and initial patch suggestion, and Shai Berger for review. Backport of 54d0f5e62f54c29a12dd96f44bacd810cbe03ac8 from master.
2019-06-21[1.11.x] Bumped minimum ESLint version to 4.18.2.Markus Holtermann
Backport of ad7b438002f1ab2a0ccb321012182991737ea84e from master.
2019-06-03[1.11.x] Post-release version bump.Carlton Gibson
2019-06-03[1.11.x] Bumped version for 1.11.21 release.1.11.21Carlton Gibson
2019-06-03[1.11.x] Fixed CVE-2019-12308 -- Made AdminURLFieldWidget validate URL ↵Carlton Gibson
before rendering clickable link. Backport of deeba6d92006999fee9adfbd8be79bf0a59e8008 from master.
2019-03-03[1.11.x] Reverted "Fixed relative paths imports per isort 4.3.5."Mariusz Felisiak
This reverts commit 463fe11bc8b2d068e447c5df677e7a31c2af7e03 due to restore of relative paths sorting from isort < 4.3.5 in isort 4.3.10. Backport of b435f82939edf70674856e0e1cd63973c2e0a1d1 from master.
2019-02-25[1.11.x] Fixed relative paths imports per isort 4.3.5.Mariusz Felisiak
Backport of 463fe11bc8b2d068e447c5df677e7a31c2af7e03 from master.
2019-02-14[1.11.x] Fixed E117 flake8 warnings.Tim Graham
2019-02-11[1.11.x] Post-release version bump.Tim Graham
2019-02-11[1.11.x] Bumped version for 1.11.20 release.1.11.20Carlton Gibson
2019-02-11[1.11.x] Bumped version for 1.11.19 release.1.11.19Carlton Gibson
2019-02-11[1.11.x] Fixed CVE-2019-6975 -- Fixed memory exhaustion in ↵Carlton Gibson
utils.numberformat.format(). Thanks Sjoerd Job Postmus for the report and initial patch. Thanks Michael Manfre, Tim Graham, and Florian Apolloner for review. Backport of 402c0caa851e265410fbcaa55318f22d2bf22ee2 from master.
2019-01-30[1.11.x] Fixed E117 and F405 flake8 warnings.Mariusz Felisiak
Backport of 5a5c77d55dc85c7e6cf910243257e408887f412a from master
2019-01-04[1.11.x] Post-release version bump.Tim Graham
2019-01-04[1.11.x] Bumped version for 1.11.18 release.1.11.18Tim Graham
2019-01-03[1.11.x] Fixed #30070, CVE-2019-3498 -- Fixed content spoofing possiblity in ↵Tom Hacohen
the default 404 page. Co-Authored-By: Tim Graham <timograham@gmail.com> Backport of 1ecc0a395be721e987e8e9fdfadde952b6dee1c7 from master.
2018-12-03[1.11.x] Post-release version bump.Carlton Gibson
2018-12-03[1.11.x] Bumped version for 1.11.17 release.1.11.17Carlton Gibson
2018-11-17[1.11.x] Refs #28814 -- Fixed migrations crash with namespace packages on ↵Tim Graham
Python 3.7. Due to https://bugs.python.org/issue32303. Backport of 0f0a07ac278dc2be6da81e519188f77e2a2a00cf from master
2018-11-17[1.11.x] Refs #28814 -- Fixed "SyntaxError: Generator expression must be ↵Tim Graham
parenthesized" on Python 3.7. Due to https://bugs.python.org/issue32012. Backport of 931c60c5216bd71bc11f489e00e063331cf21f40 from master
2018-11-16[1.11.x] Fixed #29959 -- Cached GEOS version in WKBWriter class.Claude Paroz
Regression in f185d929fa1c0caad8c03fccde899b647d7248c6. Backport of e7e55059027ae2f644c852e0ba60dc9307b425e1 from master.
2018-10-01[1.11.x] Post-release version bump.Carlton Gibson
2018-10-01[1.11.x] Bumped version for 1.11.16 release.1.11.16Carlton Gibson
2018-08-02[1.11.x] Fixed #29499 -- Fixed race condition in QuerySet.update_or_create().Michael Sanders
A race condition happened when the object didn't already exist and another process/thread created the object before update_or_create() did and then attempted to update the object, also before update_or_create() saved the object. The update by the other process/thread could be lost. Backport of 271542dad1686c438f658aa6220982495db09797 from master
2018-08-01[1.11.x] Post-release version bump.Tim Graham
2018-08-01[1.11.x] Bumped version for 1.11.15 release.1.11.15Tim Graham
2018-07-25[1.11.x] Fixed CVE-2018-14574 -- Fixed open redirect possibility in ↵Andreas Hug
CommonMiddleware.
2018-07-02[1.11.x] Post-release version bump.Carlton Gibson
2018-07-02[1.11.x] Bumped version for 1.11.14 release.1.11.14Carlton Gibson
2018-06-07[1.11.x] Fixed #28462 -- Decreased memory usage with ModelAdmin.list_editable.Adam Donaghy
Regression in 917cc288a38f3c114a5440f0749b7e5e1086eb36. Backport of b18650a2634890aa758abae2f33875daa13a9ba3 from master
2018-05-31[1.11.x] Fixed #29460 -- Added support for GEOS 3.6.Tim Graham
Backport of f185d929fa1c0caad8c03fccde899b647d7248c6 from master
2018-05-01[1.11.x] Post-release version bump.Tim Graham
2018-05-01[1.11.x] Bumped version for 1.11.13 release.1.11.13Tim Graham
2018-04-13[1.11.x] Fixed #29286 -- Fixed column mismatch crash with QuerySet.values() ↵Mariusz Felisiak
or values_list() after combining an annotated and unannotated queryset with union(), difference(), or intersection(). Regression in a0c03c62a8ac586e5be5b21393c925afa581efaf. Thanks Tim Graham and Carlton Gibson for reviews. Backport of 0b66c3b442875627fa6daef4ac1e90900d74290b from master.
2018-04-12[1.11.x] Fixed #29296 -- Fixed crashes in admindocs when a view is a ↵Paul Donohue
callable object. Backport of 33a0b7ac815588ed92dca215e153390af8bdbdda from master
2018-04-11[1.11.x] Fixed #29193 -- Prevented unnecessary foreign key drops when ↵Jeremy Bowman
altering a unique field. Stopped dropping and recreating foreign key constraints on other fields in the same table as the one which is actually being altered in an AlterField operation. Regression in c3e0adcad8d8ba94b33cabd137056166ed36dae0. Backport of ee17bb8a67a9e7e688da6e6f4b3be1b3a69c09b0 from master
2018-04-02[1.11.x] Post-release version bump.Tim Graham
generated by cgit v1.3 (git 2.53.0) at 2026-11-13 14:08:57 +0000