summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2023-10-04[4.1.x] Fixed CVE-2023-43665 -- Mitigated potential DoS in ↵Natalia
django.utils.text.Truncator when truncating HTML text. Thanks Wenchao Li of Alibaba Group for the report.
2023-09-27[4.1.x] Added stub release notes for 4.1.12 and 3.2.22.Natalia
2023-09-04[4.1.x] Added CVE-2023-41164 to security archive.Mariusz Felisiak
Backport of 8a98768868a104ea3ce10d8182590bdd095d9ccb from main
2023-09-04[4.1.x] Fixed CVE-2023-41164 -- Fixed potential DoS in ↵Mariusz Felisiak
django.utils.encoding.uri_to_iri(). Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report. Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
2023-08-28[4.1.x] Added stub release notes for 4.1.11 and 3.2.21.Mariusz Felisiak
Backport of 24f1a38b37c0af3a5ce0dd7b5392fe4e75d7e1dc from main.
2023-08-03[4.1.x] Fixed #34756 -- Fixed docs HTML build on Sphinx 7.1+.David Smith
Backport of b3e0170ab546a96930ce3114b0a1a560953c0ff4 from main
2023-07-03[4.1.x] Added CVE-2023-36053 to security archive.Mariusz Felisiak
Backport of 1d6fbf16f24200a556beb6dd197439944deb6837 from main
2023-07-03[4.1.x] Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator ↵Mariusz Felisiak
and URLValidator. Thanks Seokchan Yoon for reports.
2023-06-26[4.1.x] Added stub release notes for 4.1.10 and 3.2.20.Mariusz Felisiak
Backport of 2360ba22742c3ee8729697bfe2d508110465af56 from main
2023-05-03[4.1.x] Added CVE-2023-31047 to security archive.Mariusz Felisiak
Backport of 49830025c992fbc8d8f213e7c16dba1391c6adf2 from main
2023-05-03[4.1.x] Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of ↵Mariusz Felisiak
validation when uploading multiple files using one form field. Thanks Moataz Al-Sharida and nawaik for reports. Co-authored-by: Shai Berger <shai@platonix.com> Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
2023-04-26[4.1.x] Added missing backticks in docs/releases/1.7.txt.Mariusz Felisiak
2023-04-26[4.1.x] Added stub release notes for 4.1.9 and 3.2.19.Mariusz Felisiak
Backport of 18a7f2c711529f8e43c36190a5e2479f13899749 from main
2023-04-05[4.1.x] Added release date for 4.1.8.Mariusz Felisiak
Backport of fdf0a367bdd72c70f91fb3aed77dabbe9dcef69f from main
2023-03-08[4.1.x] Fixed #34384 -- Fixed session validation when rotation secret keys.David Wobrock
Bug in 0dcd549bbe36c060f536ec270d34d9e7d4b8e6c7. Thanks Eric Zarowny for the report. Backport of 2396933ca99c6bfb53bda9e53968760316646e01 from main
2023-03-06[4.1.x] Added stub release notes for 4.1.8.Mariusz Felisiak
Backport of 9a07999aef7958c9b5441e368cd90646d0edc5c9 from main
2023-02-16[4.1.x] Refs #21080, Refs #34322 -- Added warning to ↵Mariusz Felisiak
ManifestStaticFilesStorage docs about paths in comments. Backport of bae053d497ba8a8de7e4f725973924bfb1885fd2 from main.
2023-02-15[4.1.x] Refs #32339 -- Doc'd BaseFormSet.as_div()David Smith
Backport of 4038a8df0b8c20624ba826cf9af8f532e5a51aaa from main.
2023-02-14[4.1.x] Added CVE-2023-24580 to security archive.Carlton Gibson
Backport of ecafcaf634fcef93f9da8cb12795273dd1c3a576 from main
2023-02-14[4.1.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.Markus Holtermann
Thanks to Jakob Ackermann for the report.
2023-02-13[4.1.x] Fixed #34318 -- Added release note for ↵Sota Tabu
4bfe8c0eec835b8eaffcda7dc1e3b203751a790a. Backport of 3e9d413231edc29768cc7ca0427e63b19233f562 from main
2023-02-08[4.1.x] Fixed #34319 -- Fixed Model.validate_constraints() crash on ↵Mariusz Felisiak
ValidationError with no code. Thanks Mateusz Kurowski for the report. Regression in 667105877e6723c6985399803a364848891513cc. Backport of 2fd755b361d3da2cd0440fc9839feb2bb69b027b from main
2023-02-07[4.1.x] Added stub release notes for 4.0.10 and 3.2.18.Carlton Gibson
Set date for 4.1.7 release. Backport of 7e003428f96d616c1f77fed84882a95e63bc3644 from main
2023-02-01[4.1.x] Added stub release notes for 4.1.7.Mariusz Felisiak
Backport of f3c89744cc801cc7d134bca9958c4a74aa76380f from main
2023-02-01[4.1.x] Added CVE-2023-23969 to security archive.Mariusz Felisiak
Backport of 36e3eef7d5a4c88671d20a561788679d0d9c334c from main
2023-02-01[4.1.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for ↵Nick Pope
Accept-Language. The parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. Accept-Language headers are now limited to a maximum length in order to avoid this issue.
2023-01-31[4.1.x] Fixed #34180 -- Added note about resetting language in test tear-downs.Durval Carvalho
Co-authored-by: Faris Naimi <farisfaris66@gmail.com> Backport of 40217d1a82b0c16cddba377325d12b2c253f402a from main
2023-01-26[4.1.x] Fixed #34291 -- Fixed Meta.constraints validation crash on ↵Mariusz Felisiak
UniqueConstraint with ordered expressions. Thanks Dan F for the report. Bug in 667105877e6723c6985399803a364848891513cc. Backport of 2b1242abb3989f5d74e787b09132d01bcbee5b55 from main.
2023-01-25[4.1.x] Adjusted release notes for 4.1.6, 4.0.9, and 3.2.17.Carlton Gibson
Backport of d8e1442ce2c56282785dd806e5c1147975e8c857 from main
2023-01-25[4.1.x] Set date and added stub release notes for 4.1.6, 4.0.9, and 3.2.17.Carlton Gibson
Backport of 1df963ad2476726d63be132c0cee47e07b8250d7 from main
2023-01-20[4.1.x] Fixed #34242 -- Doc'd that primary key is set to None when deleting ↵noFFENSE
objects. Backport of 5cd1385356d4b275133ddb0f8c78b2f37c5901eb from main
2023-01-16[4.1.x] Fixed #23718 -- Doc'd that test mirrors require TransactionTestCase.sarahboyce
Co-authored-by: Christian Bundy <me@christianbundy.com> Backport of 0fbdb9784da915fce5dcc1fe82bac9b4785749e5 from main
2023-01-16[4.1.x] Fixed "nulls characters" typo in docs.Steven
Backport of 4b7016866a80ec8582f55fc7eedfa692039e9648 from main
2023-01-04[4.1.x] Fixed #34232 -- Fixed typo in docs/intro/tutorial07.txt.Raj Desai
Backport of d2310f6473593d28c14b63a72253408b568e100a from main
2023-01-02[4.1.x] Added stub release notes for 4.1.6.Mariusz Felisiak
Backport of 75500feecddcb27b6ab65c9057e7317024cef761 from main
2023-01-02[4.1.x] Added release date for 4.1.5.Mariusz Felisiak
Backport of 174d8157b5700f6451ac0bdc3eef7e73121bc4a4 from main
2022-12-29[4.1.x] Disabled auto-created table of contents entries on Sphinx 5.2+.Mariusz Felisiak
Auto-created table of contents entries for all domain objects (e.g. functions, classes, attributes, etc.) were added in Sphinx 5.2, see https://github.com/sphinx-doc/sphinx/issues/6316. An option to control new table of contents entries was added in Sphinx 5.2.3, see https://github.com/sphinx-doc/sphinx/pull/10886. Backport of 279967ec859a9a5240318cf29a077539b0e3139f from main
2022-12-20[4.1.x] Updated translations from Transifex.Mariusz Felisiak
Updated Bulgarian, Esperanto, Hungarian, Japanese, Macedonian, Persian, Portuguese (Brazil), Russian, Spanish, and Turkmen translations.
2022-12-20[4.1.x] Refs DEP 12 -- Renamed TB to Steering Council wherever mentioned.Andrew Godwin
Backport of a09d39f28609c707a62dbbbdc4e55489fae1631f from main
2022-12-19[4.1.x] Fixed typo in docs/topics/async.txt.Mariusz Felisiak
Backport of 0c60d11bdbe5bf353e3fa0f2db1cb85786ca3448 from main
2022-12-16[4.1.x] Fixed typo in docs/topics/http/sessions.txt.TAKAHASHI Shuuji
Backport of 05d70fb92b72f9701bea99c809a5edd53b290de9 from main
2022-12-14[4.1.x] Fixed #34213 -- Updated PostgreSQL package names in installing ↵Paolo Melchiorre
PostGIS docs. Backport of d44ee518c4c110af25bebdbedbbf9fba04d197aa from main
2022-12-14[4.1.x] Removed KyngChaos packages from docs.Mariusz Felisiak
See https://www.kyngchaos.com/2022/09/11/goodbye-software-packaging/ Backport of 9d9ec0c79f52efad3a4d3f6ac4644d5c9fb1d22c from main
2022-12-10[4.1.x] Fixed #34205 -- Fixed Meta.constraints validation crash with ↵James Gillard
ArrayField and __len lookup. Regression in 88fc9e2826044110b7b22577a227f122fe9c1fb5 that began manifesting in Django 4.1. Backport of c5ed884eabf3b2b67581c55bf6c87e721f69157f from main.
2022-12-07[4.1.x] Fixed #34172 -- Improved ModelAdmin.get_urls example.Sylvain Fankhauser
Backport of 0036bcdcb65874f63fff8139fe86574fa155eb26 from main
2022-12-07[4.1.x] Refs #32339 -- Updated Form API docs to prefer as_div() output style.David Smith
Backport of 9ac97e7eb5a74f813012715c7598c8608e78e178 from main
2022-12-06[4.1.x] Added stub release notes for 4.1.5.Carlton Gibson
Backport of 845a5db38fd3d2695af8cece78951729936a0196 from main
2022-12-06[4.1.x] Added release date for 4.1.4.Carlton Gibson
Backport of f4a053a2940c2e5324550cd796724a5837362cba from main
2022-12-06[4.1.x] Fixed #24048 -- Corrected QuerySet.only() docs about interaction ↵Ryan Cheley
with defer(). Backport of 68bd8f4cb4d14dccfb016bb15177506234f567fb from main
2022-12-06[4.1.x] Updated various links to HTTPS and new locations.Mariusz Felisiak
Backport of 514884e9a555c51afba3d26d9370a908af4752a6 from main
generated by cgit v1.3 (git 2.53.0) at 2026-07-04 23:52:51 +0000