summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2021-02-19[3.0.x] Bumped version for 3.0.13 release.3.0.13Carlton Gibson
2021-02-18[3.0.x] Fixed CVE-2021-23336 -- Fixed web cache poisoning via ↵Nick Pope
django.utils.http.limited_parse_qsl().
2021-02-01[3.0.x] Post-release version bump.Mariusz Felisiak
2021-02-01[3.0.x] Bumped version for 3.0.12 release.3.0.12Mariusz Felisiak
2021-02-01[3.0.x] Fixed CVE-2021-3281 -- Fixed potential directory-traversal via ↵Mariusz Felisiak
archive.extract(). Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews. Thanks Wang Baohua for the report. Backport of 05413afa8c18cdb978fcdf470e09f7a12b234a23 from master.
2020-11-02[3.0.x] Post-release version bump.Carlton Gibson
2020-11-02[3.0.x] Bumped version for 3.0.11 release.3.0.11Carlton Gibson
2020-10-29[3.0.x] Fixed #32152 -- Fixed grouping by subquery aliases.Christian Klus
Regression in 42c08ee46539ef44f8658ebb1cbefb408e0d03fe. Thanks Simon Charette for the review. Backport of 4ac2d4fa42e1659f328c35b6b8d4761b3419c11a from master
2020-09-01[3.0.x] Post-release version bump.Carlton Gibson
2020-09-01[3.0.x] Bumped version for 3.0.10 release.3.0.10Carlton Gibson
2020-08-25[3.0.x] Fixed CVE-2020-24584 -- Fixed permission escalation in ↵Mariusz Felisiak
intermediate-level directories of the file system cache on Python 3.7+. Backport of f56b57976133129b0b351a38bba4ac882badabf0 from master.
2020-08-25[3.0.x] Fixed CVE-2020-24583, #31921 -- Fixed permissions on ↵Mariusz Felisiak
intermediate-level static and storage directories on Python 3.7+. Thanks WhiteSage for the report. Backport of ea0febbba531a3ecc8c77b570efbfb68ca7155db from master.
2020-08-13[3.0.x] Fixed #31863 -- Prevented mutating model state by copies of model ↵Gert Burger
instances. Regression in bfb746f983aa741afa3709794e70f1e0ab6040b5. Backport of 94ea79be137f3cb30949bf82198e96e094f2650d from master
2020-08-11[3.0.x] Fixed #31866 -- Fixed locking proxy models in ↵Daniel Hillier
QuerySet.select_for_update(of=()). Backport of 60626162f76f26d32a38d18151700cb041201fb3 from master
2020-08-03[3.0.x] Post-release version bump.Mariusz Felisiak
2020-08-03[3.0.x] Bumped version for 3.0.9 release.3.0.9Mariusz Felisiak
2020-07-20[3.0.x] Fixed #31784 -- Fixed crash when sending emails on Python 3.6.11+, ↵Florian Apolloner
3.7.8+, and 3.8.4+. Fixed sending emails crash on email addresses with display names longer then 75 chars on Python 3.6.11+, 3.7.8+, and 3.8.4+. Wrapped display names were passed to email.headerregistry.Address() what caused raising an exception because address parts cannot contain CR or LF. See https://bugs.python.org/issue39073 Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of 96a3ea39ef0790dbc413dde0a3e19f6a769356a2 from master
2020-07-16[3.0.x] Fixed #31790 -- Fixed setting SameSite cookies flag in ↵Mariusz Felisiak
HttpResponse.delete_cookie(). Cookies with the "SameSite" flag set to None and without the "secure" flag will be soon rejected by latest browser versions. This affects sessions and messages cookies. Backport of 240cbb63bf9965c63d7a3cc9032f91410f414d46 from master.
2020-07-01[3.0.x] Post-release version bump.Mariusz Felisiak
2020-07-01[3.0.x] Bumped version for 3.0.8 release.3.0.8Mariusz Felisiak
2020-06-30[3.0.x] Fixed #31751 -- Fixed database introspection with cx_Oracle 8.Mariusz Felisiak
Backport of 615e32162ff646db3456b90fb4eaaecc33dd3e4e from master
2020-06-24[3.0.x] Fixed #31735 -- Fixed migrations crash on namespaced inline FK ↵Simon Charette
addition on PostgreSQL. The namespace of the constraint must be included when making the constraint immediate. Regression in 22ce5d0031bd795ade081394043833e82046016c. Thanks Rodrigo Estevao for the report. Backport of 2e8941b6f90e65ffad3f07083b8de59e8ed29767 from master
2020-06-08[3.0.x] Fixed #31664 -- Reallowed using non-expressions having filterable ↵Nicolas Baccelli
attribute as rhs in queryset filters. Regression in 4edad1ddf6203326e0be4bdb105beecb0fe454c4. Backport of b38d44229ff185ad156bcb443d6db0db7ae3eb98 from master
2020-06-08[3.0.x] Fixed #31660 -- Fixed queryset crash when grouping by m2o relation.Mariusz Felisiak
Regression in 3a941230c85b2702a5e1cd97e17251ce21057efa. Thanks Tomasz Szymański for the report. Backport of 78ad4b4b0201003792bfdbf1a7781cbc9ee03539 from master
2020-06-05[3.0.x] Fixed #31654 -- Fixed cache key validation messages.Mariusz Felisiak
Backport of 926148ef019abcac3a9988c78734d9336d69f24e from master
2020-06-03[3.0.x] Post-release version bump.Carlton Gibson
2020-06-03[3.0.x] Bumped version for 3.0.7 release.3.0.7Carlton Gibson
2020-06-03[3.0.x] Fixed CVE-2020-13254 -- Enforced cache key validation in memcached ↵Dan Palmer
backends.
2020-06-03[3.0.x] Fixed CVE-2020-13596 -- Fixed potential XSS in admin ↵Jon Dufresne
ForeignKeyRawIdWidget.
2020-06-02[3.0.x] Refs #31485 -- Backported jQuery upgrade to 3.5.1.Carlton Gibson
2020-06-01[3.0.x] Fixed #31570 -- Corrected translation loading for apps providing ↵Carlton Gibson
territorial language variants with different plural equations. Regression in e3e48b00127c09eafe6439d980a82fc5c591b673. Thanks to Shai Berger for report, reproduce and suggested fix. Backport of dd1ca50b096bf0351819aabc862e91a9797ddaca from master
2020-05-19[3.0.x] Fixed #31607 -- Fixed evaluated Subquery equality.Mariusz Felisiak
Regression in 691def10a0197d83d2d108bd9043b0916d0f09b4. Backport of a125da6a7c79b1d4c55677d0bed6f9b1d7d77353 from master
2020-05-14[3.0.x] Fixed #31584 -- Fixed crash when chaining values()/values_list() ↵Mariusz Felisiak
after Exists() annotation and aggregation on Oracle. Oracle requires the EXISTS expression to be wrapped in a CASE WHEN in the GROUP BY clause. Regression in efa1908f662c19038a944129c81462485c4a9fe8. Backport of 3a941230c85b2702a5e1cd97e17251ce21057efa from master
2020-05-14[3.0.x] Fixed #31568 -- Fixed alias reference when aggregating over multiple ↵Simon Charette
subqueries. 691def10a0197d83d2d108bd9043b0916d0f09b4 made all Subquery() instances equal to each other which broke aggregation subquery pushdown which relied on object equality to determine which alias it should select. Subquery.__eq__() will be fixed in an another commit but Query.rewrite_cols() should haved used object identity from the start. Refs #30727, #30188. Thanks Makina Corpus for the report. Backport of adfbf653dc1c1d0e0dacc4ed46602d22ba28b004 from master
2020-05-14[3.0.x] Fixed #31566 -- Fixed aliases crash when chaining ↵Simon Charette
values()/values_list() after annotate() with aggregations and subqueries. Subquery annotation references must be resolved if they are excluded from the GROUP BY clause by a following .values() call. Regression in fb3f034f1c63160c0ff13c609acd01c18be12f80. Thanks Makina Corpus for the report. Backport of 42c08ee46539ef44f8658ebb1cbefb408e0d03fe from master
2020-05-12[3.0.x] Fixed E128, E741 flake8 warnings.Mariusz Felisiak
Backport of 0668164b4ac93a5be79f5b87fae83c657124d9ab from master.
2020-05-06[3.0.x] Fixed a/an typos in "SQL" usage.Adam Johnson
Backport of 1c2c6f1b51a540bddc7ae95f4d1213688411ca44 from master
2020-05-05[3.0.x] Fixed #31538 -- Fixed Meta.ordering validation lookups that are not ↵Mariusz Felisiak
transforms. Regression in 440505cb2cadbe1a5b9fba246bcde6c04f51d07e. Thanks Simon Meers for the report. Backport of b73e66e75802f10cc34d4880714554cea54dbf49 from master
2020-05-04[3.0.x] Post-release version bump.Mariusz Felisiak
2020-05-04[3.0.x] Bumped version for 3.0.6 release.3.0.6Mariusz Felisiak
2020-04-06[3.0.x] Fixed #31420 -- Fixed crash when filtering subquery annotation ↵Hasan Ramezani
against a SimpleLazyObject. Thanks Simon Charette for the solution and analysis. Backport of 4237050684427db45ea834fe89d9e11c0520201e from master
2020-04-01[3.0.x] Post-release version bump.Carlton Gibson
2020-04-01[3.0.x] Bumped version for 3.0.5 release.3.0.5Carlton Gibson
2020-03-25[3.0.x] Fixed #31377 -- Disabled grouping by aliases on ↵Hasan Ramezani
QuerySet.values()/values_list() when they collide with field names. Regression in fb3f034f1c63160c0ff13c609acd01c18be12f80. Thanks Holovashchenko Vadym for the report. Backport of 10866a10fe9f0ad3ffdf6f93823aaf4716e6f27c from master
2020-03-10[3.0.x] Fixed #30439 -- Added support for different plural forms for a language.Claude Paroz
Thanks to Michal Čihař for review. Backport of e3e48b00127c09eafe6439d980a82fc5c591b673 from master
2020-03-04[3.0.x] Post-release version bump.Mariusz Felisiak
2020-03-04[3.0.x] Bumped version for 3.0.4 release.3.0.4Mariusz Felisiak
2020-03-04[3.0.x] Fixed CVE-2020-9402 -- Properly escaped tolerance parameter in GIS ↵Mariusz Felisiak
functions and aggregates on Oracle. Thanks to Norbert Szetei for the report.
2020-03-03[3.0.x] Fixed #31150 -- Included subqueries that reference related fields in ↵Mariusz Felisiak
GROUP BY clauses. Thanks Johannes Hoppe for the report. Regression in fb3f034f1c63160c0ff13c609acd01c18be12f80. Co-authored-by: Simon Charette <charette.s@gmail.com> Backport of 7b8fa1653fde578ab3a496d9974ab1d4261b8b26 from master
2020-02-27[3.0.x] Fixed #31312 -- Properly ordered temporal subtraction params on MySQL.Simon Charette
Regression in 9bcbcd599abac91ea853b2fe10b784ba32df043e. Thanks rick2ricks for the report. Backport of 41ebe60728a15aa273f4d70de92f5246a89c3d4e from master
generated by cgit v1.3 (git 2.53.0) at 2026-07-14 09:20:19 +0000