| Age | Commit message (Expand) | Author |
| 2024-12-04 | [4.2.x] Bumped version for 4.2.17 release.4.2.17 | Sarah Boyce |
| 2024-12-04 | [4.2.x] Fixed CVE-2024-53908 -- Prevented SQL injections in direct HasKeyLook... | Simon Charette |
| 2024-12-04 | [4.2.x] Fixed CVE-2024-53907 -- Mitigated potential DoS in strip_tags(). | Sarah Boyce |
| 2024-12-03 | [4.2.x] Refs CVE-2024-11168 -- Updated vendored _urlsplit() to properly valid... | Mariusz Felisiak |
| 2024-11-27 | [4.2.x] Added stub release notes and release date for 4.2.17. | Sarah Boyce |
| 2024-11-26 | [4.2.x] Fixed docs build on Sphinx 8.1+. | Mariusz Felisiak |
| 2024-10-30 | [4.2.x] Refs #35844 -- Expanded compatibility for expected error messages in ... | Tainara Palmeira |
| 2024-10-09 | [4.2.x] Added GitHub Action workflow to test all Python versions listed in th... | nessita |
| 2024-09-03 | [4.2.x] Added CVE-2024-45230 and CVE-2024-45231 to security archive. | Natalia |
| 2024-09-03 | [4.2.x] Post-release version bump. | Natalia |
| 2024-09-03 | [4.2.x] Bumped version for 4.2.16 release.4.2.16 | Natalia |
| 2024-09-03 | [4.2.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when e... | Natalia |
| 2024-09-03 | [4.2.x] Fixed CVE-2024-45230 -- Mitigated potential DoS in urlize and urlizet... | Sarah Boyce |
| 2024-08-27 | [4.2.x] Fixed grammatical error in stub release notes for upcoming security r... | Natalia |
| 2024-08-27 | [4.2.x] Added stub release notes and release date for 4.2.16. | Natalia |
| 2024-08-06 | [4.2.x] Added CVE-2024-41989, CVE-2024-41990, CVE-2024-41991, and CVE-2024-42... | Sarah Boyce |
| 2024-08-06 | [4.2.x] Post-release version bump. | Sarah Boyce |
| 2024-08-06 | [4.2.x] Bumped version for 4.2.15 release.4.2.15 | Sarah Boyce |
| 2024-07-31 | [4.2.x] Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection att... | Simon Charette |
| 2024-07-31 | [4.2.x] Fixed CVE-2024-41991 -- Prevented potential ReDoS in django.utils.htm... | Mariusz Felisiak |
| 2024-07-31 | [4.2.x] Fixed CVE-2024-41990 -- Mitigated potential DoS in urlize and urlizet... | Sarah Boyce |
| 2024-07-31 | [4.2.x] Fixed CVE-2024-41989 -- Prevented excessive memory consumption in flo... | Sarah Boyce |
| 2024-07-31 | [4.2.x] Added stub release notes and release date for 4.2.15. | Sarah Boyce |
| 2024-07-25 | [4.2.x] Fixed #35627 -- Raised a LookupError rather than an unhandled ValueEr... | Lorenzo Peña |
| 2024-07-11 | [4.2.x] Fixed auth_tests and file_storage tests on Python 3.8. | Mariusz Felisiak |
| 2024-07-09 | [4.2.x] Added CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, and CVE-2024-39... | Natalia |
| 2024-07-09 | [4.2.x] Post-release version bump. | Natalia |
| 2024-07-09 | [4.2.x] Bumped version for 4.2.14 release.4.2.14 | Natalia |
| 2024-07-09 | [4.2.x] Fixed CVE-2024-39614 -- Mitigated potential DoS in get_supported_lang... | Sarah Boyce |
| 2024-07-09 | [4.2.x] Fixed CVE-2024-39330 -- Added extra file name validation in Storage's... | Natalia |
| 2024-07-09 | [4.2.x] Fixed CVE-2024-39329 -- Standarized timing of verify_password() when ... | Michael Manfre |
| 2024-07-09 | [4.2.x] Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizet... | Adam Johnson |
| 2024-07-03 | [4.2.x] Added stub release notes for 4.2.14. | Natalia |
| 2024-05-07 | [4.2.x]Post-release version bump. | Natalia |
| 2024-05-07 | [4.2.x] Bumped version for 4.2.13 release.4.2.13 | Sarah Boyce |
| 2024-05-07 | [4.2.x] Added release notes for 4.2.13. | Sarah Boyce |
| 2024-05-06 | [4.2.x] Post-release version bump. | Natalia |
| 2024-05-06 | [4.2.x] Bumped version for 4.2.12 release.4.2.12 | Sarah Boyce |
| 2024-05-06 | [4.2.x] Added release date for 4.2.12. | Sarah Boyce |
| 2024-04-19 | [4.2.x] Reverted "Fixed #34994, Fixed #35386 -- Applied checkbox-row CSS clas... | Sarah Boyce |
| 2024-04-19 | [4.2.x] Fixed #34994, Fixed #35386 -- Applied checkbox-row CSS class uncondit... | Adam Johnson |
| 2024-04-12 | [4.2.x] Refs #35361 -- Clarified release notes for 4.2.12. | Natalia |
| 2024-04-10 | [4.2.x] Fixed #35361 -- Added release notes for 4.2.12 for backport of b231bc... | Natalia |
| 2024-04-10 | [4.2.x] Refs #34900, Refs #35361 -- Fixed SafeMIMEText.set_payload() crash on... | Mariusz Felisiak |
| 2024-03-04 | [4.2.x] Added CVE-2024-27351 to security archive. | Mariusz Felisiak |
| 2024-03-04 | [4.2.x] Post-release version bump. | Mariusz Felisiak |
| 2024-03-04 | [4.2.x] Bumped version for 4.2.11 release.4.2.11 | Mariusz Felisiak |
| 2024-03-04 | [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words(). | Shai Berger |
| 2024-02-26 | [4.2.x] Added release date for 4.2.11 and 3.2.25. | Mariusz Felisiak |
| 2024-02-10 | [4.2.x] Refs #34900, Refs #34118 -- Updated assertion in test_skip_class_unle... | Daniel Garcia Moreno |