https://github.com/django/django

sort by:
Revision Author Date Message Commit Date
81f0da9 [1.11.x] Bumped version for 1.11.25 release. 01 October 2019, 07:54:07 UTC
9d2916f [1.11.x] Added release date for 1.11.25. Backport of 3826aed46d7d4310c2ab6777a4f92165ca4d8d4f from master. 01 October 2019, 07:01:51 UTC
fd39390 [1.11.x] Fixed #30769 -- Fixed a crash when filtering against a subquery JSON/HStoreField annotation. This was a regression introduced by 7deeabc7c7526786df6894429ce89a9c4b614086 to address CVE-2019-14234. Thanks Tim Kleinschmidt for the report and Mariusz for the tests. Backport of 6c3dfba89215fc56fc27ef61829a6fff88be4abb from master. 16 September 2019, 07:05:48 UTC
30c3d5f [1.11.x] Added stub release notes for 1.11.25. Backport of bd7e0f81f8590eadcb820c976ba03c9b75bbcad6 from master 16 September 2019, 05:45:42 UTC
f213c4c [1.11.x] Post-release version bump. 02 September 2019, 07:02:39 UTC
4c049c8 [1.11.x] Bumped version for 1.11.24 release. 02 September 2019, 06:45:34 UTC
835b62a [1.11.x] Added release date for 1.11.24. Backport of 47f49adc11c0d39be3f41f92becc1f606c49d8ce from master. 02 September 2019, 05:49:10 UTC
473c526 [1.11.x] Fixed #30672 -- Fixed crash of JSONField/HStoreField key transforms on expressions with params. Regression in 4f5b58f5cd3c57fee9972ab074f8dc6895d8f387. Thanks Florian Apolloner for the report and helping with tests. Backport of 1f8382d34d54061eddc41df6994e20ee38c60907 from master. 14 August 2019, 13:58:10 UTC
3deda1f [1.11.x] Added CVE-2019-14235 to security release archive. Backport of a5652eb795e896df0c0f2515201f35f9cd86b99b from master 01 August 2019, 10:07:11 UTC
738b45d [1.11.x] Added CVE-2019-14234 to security release archive. Backport of 3a6a2f5eaf74200a9591a6311fdb0ea78ee305ee from master 01 August 2019, 10:07:06 UTC
7482d25 [1.11.x] Added CVE-2019-14233 to security release archive. Backport of 9600f63885d2d240f85d59bff6acbe200f890298 from master 01 August 2019, 10:07:00 UTC
ba79161 [1.11.x] Added CVE-2019-14232 to the security release archive. Backport of 87750787d1e464b7143f366d9485ba20fefc9c94 from master 01 August 2019, 10:06:54 UTC
1e6a5b0 [1.11.x] Post-release version bump. 01 August 2019, 08:46:21 UTC
9748977 [1.11.x] Bumped version for 1.11.23 release. 01 August 2019, 08:43:51 UTC
869b34e [1.11.x] Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in django.utils.encoding.uri_to_iri(). Thanks to Guido Vranken for initial report. 31 July 2019, 19:29:17 UTC
ed682a2 [1.11.x] Fixed CVE-2019-14234 -- Protected JSONField/HStoreField key and index lookups against SQL injection. Thanks to Sage M. Abdullah for the report and initial patch. Thanks Florian Apolloner for reviews. 31 July 2019, 19:29:17 UTC
52479ac [1.11.x] Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in strip_tags() when handling incomplete HTML entities. Thanks to Guido Vranken for initial report. 29 July 2019, 09:20:43 UTC
42a66e9 [1.11.X] Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues when truncating HTML. Thanks to Guido Vranken for initial report. 29 July 2019, 09:18:34 UTC
693046e [1.11.x] Added stub release notes for security releases. Backport of f13147c8de725eed7038941758469aeb9bd66503 from master. 25 July 2019, 08:58:17 UTC
6d054b5 [1.11.x] Added CVE-2019-12781 to the security release archive. Backport of 868cd56f058ca203419ad0886353173b74c3bcf1 from master 01 July 2019, 08:24:29 UTC
7c849b9 [1.11.x] Post-release version bump. 01 July 2019, 06:47:34 UTC
480380c [1.11.x] Bumped version for 1.11.22 release. 01 July 2019, 06:43:35 UTC
32124fc [1.11.x] Fixed CVE-2019-12781 -- Made HttpRequest always trust SECURE_PROXY_SSL_HEADER if set. An HTTP request would not be redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings were used if the proxy connected to Django via HTTPS. HttpRequest.scheme will now always trust the SECURE_PROXY_SSL_HEADER if set, rather than falling back to the request scheme when the SECURE_PROXY_SSL_HEADER did not have the secure value. Thanks to Gavin Wahl for the report and initial patch suggestion, and Shai Berger for review. Backport of 54d0f5e62f54c29a12dd96f44bacd810cbe03ac8 from master. 01 July 2019, 06:40:19 UTC
58553bb [1.11.x] Added stub release notes for security releases. Backport of 30b3ee9d0b33bb440f9c73d1ce9e0e7303887a9f from master 01 July 2019, 05:05:49 UTC
bc5febe [1.11.x] Fixed GeoIPTest.test04_city() failure with the latest GeoIP2 database. Backport of 4305fbe8b11f44ab5d6759346488026c1e9677b2 from master. 30 June 2019, 18:21:27 UTC
7906968 [1.11.x] Bumped minimum ESLint version to 4.18.2. Backport of ad7b438002f1ab2a0ccb321012182991737ea84e from master. 21 June 2019, 16:18:36 UTC
341f444 [1.11.x] Added CVE-2019-12308 to the security release archive. Backport of 21b1d239125f1228e579b1ce8d94d4d5feadd2a6 from master 03 June 2019, 19:47:37 UTC
9f8bed5 [1.11.x] Added CVE-2019-11358 to the security release archive. Backport of 8fb0ea55830321852a4a051a478f78e24d4f6889 from master 03 June 2019, 19:47:34 UTC
a07ce0e [1.11.x] Fixed typo in 1.11.21 release notes. Backport of 100ec901aebebe56b61f101af38a228414098dd5 from master. 03 June 2019, 12:17:07 UTC
2f67c8e [1.11.x] Post-release version bump. 03 June 2019, 09:59:53 UTC
bc1f79d [1.11.x] Bumped version for 1.11.21 release. 03 June 2019, 09:48:10 UTC
c238701 [1.11.x] Fixed CVE-2019-12308 -- Made AdminURLFieldWidget validate URL before rendering clickable link. Backport of deeba6d92006999fee9adfbd8be79bf0a59e8008 from master. 03 June 2019, 09:38:19 UTC
4b3716e [1.11.x] Added stub release notes for security releases. Backport of 98c0fe19ee2cba9726708ac9336e1dc0d43cca69 from master 03 June 2019, 08:54:19 UTC
331d765 [1.11.x] Refs #27807 -- Removed docs for User.username_validator. The new override functionality claimed in refs #21379 doesn't work. Forwardport of 714fdbaa7048c2321f6238d9421137c33d9af7cc from stable/1.10.x. 08 April 2019, 00:09:15 UTC
d13490c [1.11.x] Refs #30331 -- Doc'd that psycopg2 < 2.8 is required. Backport of 0a8617a5b1cac7063f30e4d8ff4ea4c30748f7b8 from stable/2.1.x. 05 April 2019, 10:13:05 UTC
22c0564 [1.11.x] Fixed #30277 -- Fixed broken links to packaging.python.org. Backport of 8f1cc7e9e61758475ddd6586e0fede4af1ca0e8d from master. 21 March 2019, 14:08:38 UTC
9530fac [1.11.x] Fixed serializers test crash if PyYAML isn't installed. Follow up to a57c783dd4e6dc73847081221827a1902eede88b. Backport of 55490ac7469a3647ce163bee323f7fe4a06fcaa6 from master 20 March 2019, 15:11:02 UTC
f8ce3cd [1.11.x] Fixed serializers tests for PyYAML 5.1+. Backport of a57c783dd4e6dc73847081221827a1902eede88b from master 14 March 2019, 17:45:14 UTC
f13bfde [1.11.x] Reverted "Fixed relative paths imports per isort 4.3.5." This reverts commit 463fe11bc8b2d068e447c5df677e7a31c2af7e03 due to restore of relative paths sorting from isort < 4.3.5 in isort 4.3.10. Backport of b435f82939edf70674856e0e1cd63973c2e0a1d1 from master. 03 March 2019, 18:47:17 UTC
b9beb6a [1.11.x] Fixed relative paths imports per isort 4.3.5. Backport of 463fe11bc8b2d068e447c5df677e7a31c2af7e03 from master. 25 February 2019, 19:02:56 UTC
1b8a26e [1.11.x] Fixed E117 flake8 warnings. 14 February 2019, 14:35:54 UTC
d718f52 [1.11.x] Added CVE-2019-6975 to the security release archive. Backport of d6e5aad5c7eba3d8061c09902de16cd2b22619af from master. 11 February 2019, 21:15:21 UTC
013b923 [1.11.x] Post-release version bump. 11 February 2019, 20:54:39 UTC
1c9cb94 [1.11.x] Bumped version for 1.11.20 release. 11 February 2019, 14:54:26 UTC
f2c5f66 [1.11.x] Refs #30175 -- Added release notes for 1.11.20 release. Backport of b39bd0aa6d5667d6bbcf7d349a1035c676e3f972 from master 11 February 2019, 14:52:35 UTC
1cdba62 [1.11.x] Bumped version for 1.11.19 release. 11 February 2019, 10:31:04 UTC
0bbb560 [1.11.x] Fixed CVE-2019-6975 -- Fixed memory exhaustion in utils.numberformat.format(). Thanks Sjoerd Job Postmus for the report and initial patch. Thanks Michael Manfre, Tim Graham, and Florian Apolloner for review. Backport of 402c0caa851e265410fbcaa55318f22d2bf22ee2 from master. 11 February 2019, 10:15:45 UTC
11cb395 [1.11.x] Removed extra characters in docs header underlines. Backport of 25829197bb94585e94695360065ac614aa9e6a56 from master 08 February 2019, 20:44:04 UTC
fc858ab Added stub release notes for security releases. # Conflicts: # docs/releases/2.1.6.txt 07 February 2019, 14:56:05 UTC
f245cec [1.11.x] Used extlinks for GitHub commits. Backport of c34c6d0a2fc6d9bc55fb2db94b9ed40141babb15 from master. 01 February 2019, 20:55:56 UTC
5a50ef9 [1.11.x] Replaced CVE/ticket roles with extlinks. Backport of 44f98f78804627839d5f0a8b3a32bfbb4546ff52 from master. 01 February 2019, 20:55:49 UTC
951ee0b [1.11.x] Refs #30150 -- Doc'd that MySQL 8 isn't supported. 01 February 2019, 13:32:42 UTC
cea425e [1.11.x] Fixed E117 and F405 flake8 warnings. Backport of 5a5c77d55dc85c7e6cf910243257e408887f412a from master 30 January 2019, 12:15:13 UTC
71e8cdb [1.11.x] Added CVE-2019-3498 to the security release archive. Backport of 162ae9c9143aa85eb27ea69b446a28973eea4854 from master. 04 January 2019, 14:25:51 UTC
b4937b7 [1.11.x] Post-release version bump. 04 January 2019, 14:11:09 UTC
2c9dbe9 [1.11.x] Bumped version for 1.11.18 release. 04 January 2019, 14:06:59 UTC
1cd00fc [1.11.x] Fixed #30070, CVE-2019-3498 -- Fixed content spoofing possiblity in the default 404 page. Co-Authored-By: Tim Graham <timograham@gmail.com> Backport of 1ecc0a395be721e987e8e9fdfadde952b6dee1c7 from master. 04 January 2019, 03:09:25 UTC
b683bb0 [1.11.x] Pinned Pillow != 5.4.0 in test requirements. There's a bug that causes a test failure in forms_tests: https://github.com/python-pillow/Pillow/pull/3501/files#r244651761. Backport of e4a714b259125423059b9f65f5e0ab70d78521ba from master. 02 January 2019, 22:43:25 UTC
190aa59 [1.11.x] Fixed broken links to PyYAML page. Backport of b7dbd5ff68bb9d2235ca081c0bd0b8baa65f8c77 from master. 27 December 2018, 09:56:19 UTC
2ea1e0e [1.11.x] Refs #30013 -- Doc'd that mysqlclient 1.3.14 and later isn't supported. 05 December 2018, 20:51:04 UTC
a5338b1 [1.11.x] Post-release version bump. 03 December 2018, 17:13:45 UTC
4f5f6f3 [1.11.x] Bumped version for 1.11.17 release. 03 December 2018, 14:36:33 UTC
b69c27a [1.11.x] Added release date for 1.11.17. Backport of 950112548e61098f442d37a8ded4ef9f83ff8fda from master 03 December 2018, 14:30:07 UTC
882935e [1.11.x] Removed usage of deprecated sphinx APIs. Backport of cc4bb110d31f18d2931fd79d792d3ac09cce19e5 from master. 17 November 2018, 23:05:54 UTC
c11a7b4 [1.11.x] Refs #28814 -- Documented Python 3.7 compatibility. Backport of 2f7cd7f8ecb01d30c1dfdaefa1c1714db76d2553 from master 17 November 2018, 20:35:08 UTC
8deb0a8 [1.11.x] Refs #28814 -- Fixed migrations crash with namespace packages on Python 3.7. Due to https://bugs.python.org/issue32303. Backport of 0f0a07ac278dc2be6da81e519188f77e2a2a00cf from master 17 November 2018, 19:46:04 UTC
b9e2489 [1.11.x] Refs #28814 -- Fixed test_runner failure on Python 3.7. Due to https://bugs.python.org/issue30399. Backport of 9d1d3b2d2fe0bef995b024368088eeabbdf73629 from master 17 November 2018, 19:46:04 UTC
568c2f4 [1.11.x] Refs #28814 -- Fixed "SyntaxError: Generator expression must be parenthesized" on Python 3.7. Due to https://bugs.python.org/issue32012. Backport of 931c60c5216bd71bc11f489e00e063331cf21f40 from master 17 November 2018, 19:46:04 UTC
216398d [1.11.x] Fixed #29959 -- Cached GEOS version in WKBWriter class. Regression in f185d929fa1c0caad8c03fccde899b647d7248c6. Backport of e7e55059027ae2f644c852e0ba60dc9307b425e1 from master. 16 November 2018, 20:15:25 UTC
e75120c [1.11.x] Removed release date for 1.11.17. Backport of 97cec6f75d9d9b86892829f784e5e9dabfd1242a from master. 16 November 2018, 14:39:08 UTC
0ecc4f8 [1.11.x] Removed obsolete and flaky GeoIP tests. Backport of 8f90593e6f8197148c8f86e598bfef6792f3f4bf from master. 10 November 2018, 21:34:03 UTC
b5702da [1.11.x] Ignored flake8 W504 warnings. W504 is mutually exclusive with W503 that we follow. Backport of 58d1e9aa8ab505912389e7cd019a6f21785ad4bf from master. 24 October 2018, 13:42:05 UTC
bd197d3 [1.11.x] Added CVE-2018-16984 to the security release archive. Backport of 0b3b7c4b0ab2567cfe5df3ac19563d4a59276cb1 and 92ccc3917058b1025b2d657ffdf3c21eb8009f7b from master 01 October 2018, 13:08:18 UTC
21ea15d [1.11.x] Added stub release notes for 1.11.17 release. Backport of 7040e638b960c122cd71eccac2b1bf2fe8d0f5da from master 01 October 2018, 10:03:17 UTC
abd0baf [1.11.x] Post-release version bump. 01 October 2018, 09:38:36 UTC
3d0344d [1.11.x] Bumped version for 1.11.16 release. 01 October 2018, 07:38:51 UTC
c1e9e2a [1.11.x] Added release date for 1.11.16. Backport of d37ed40048b749c75f7f54ef8b96d8e738f10719 from master 01 October 2018, 07:36:13 UTC
006ca97 [1.11.x] Refs #29759 -- Doc'd that cx_Oracle < 7 is required. Backport of 7085247e2fd1ad8b08103173a23ca730784765a3 from stable/2.0.x 18 September 2018, 08:42:04 UTC
ceae306 [1.11.x] Fixed #28540 -- Doc'd a change to file upload permissions in Django 1.11. Behavior changed in f734e2d4b2fc4391a4d097b80357724815c1d414 (refs #27334). Backport of 89d4d412404d31ef34ae3170c0c056eff55b2a17 from master 04 August 2018, 15:06:37 UTC
8a0b905 [1.11.x] Refs #29499 -- Skipped QuerySet.update_or_create() test that fails on MySQL. 03 August 2018, 16:13:06 UTC
2668418 [1.11.x] Fixed #29499 -- Fixed race condition in QuerySet.update_or_create(). A race condition happened when the object didn't already exist and another process/thread created the object before update_or_create() did and then attempted to update the object, also before update_or_create() saved the object. The update by the other process/thread could be lost. Backport of 271542dad1686c438f658aa6220982495db09797 from master 02 August 2018, 21:28:23 UTC
98c77c5 [1.11.x] Added CVE-2018-14574 to the security release archive. Backport of 0006538e53bf11d1de26801b13b78807354de2c8 from master 01 August 2018, 15:07:37 UTC
08cbca3 [1.11.x] Post-release version bump. 01 August 2018, 14:53:21 UTC
6010da2 [1.11.x] Bumped version for 1.11.15 release. 01 August 2018, 13:40:26 UTC
d6eaee0 [1.11.x] Fixed CVE-2018-14574 -- Fixed open redirect possibility in CommonMiddleware. 25 July 2018, 16:13:03 UTC
4fd1f67 [1.11.x] Added stub release notes for security release. 24 July 2018, 23:01:29 UTC
bce29f1 [1.11.x] Post-release version bump. 02 July 2018, 09:11:33 UTC
32009ee [1.11.x] Bumped version for 1.11.14 release. 02 July 2018, 08:17:44 UTC
63a6aa2 [1.11.x] Added release date for 1.11.14. Backport of 65df375c40dfe591b258f36709123abc6957fbd7 from master 02 July 2018, 08:14:51 UTC
d46fb4e [1.11.x] Fixed location of a few doc labels. Backport of 1229687a0a261d05a72e6f189c1a9b0069b302e5 from master 28 June 2018, 12:58:45 UTC
56c5c15 [1.11.x] Fixed #28462 -- Decreased memory usage with ModelAdmin.list_editable. Regression in 917cc288a38f3c114a5440f0749b7e5e1086eb36. Backport of b18650a2634890aa758abae2f33875daa13a9ba3 from master 07 June 2018, 14:15:56 UTC
b548180 [1.11.x] Fixed #29461 -- Fixed ogrinspect test_time_field failure on SpatiaLite. Backport of 666be7b9942611d5c0f5e485c448f219cd5a1ad5 from master 02 June 2018, 11:33:32 UTC
d60d7d6 [1.11.x] Fixed #29462 -- Fixed ogrinspect test failures with GDAL 2.2. Backport of 55f4eee75d41499995bfdb611ac89e80c87404eb from master 02 June 2018, 02:38:49 UTC
6f171c2 [1.11.x] Refs #28257 -- Updated a test for GDAL 2.2 Partial backport of 28627608945ddc3f59fb6a011a4eb363d8020e83 from master 31 May 2018, 21:45:49 UTC
5bb00c0 [1.11.x] Fixed #29460 -- Added support for GEOS 3.6. Backport of f185d929fa1c0caad8c03fccde899b647d7248c6 from master 31 May 2018, 16:15:27 UTC
212804f [1.11.x] Added stub release notes for 1.11.14. Backport of 8a6fcfdc77d84bd5cebf1e6a6dd65c64f9cb40b8 from master 31 May 2018, 14:18:48 UTC
10e6dd7 [1.11.x] Fixed docs typo in HttpResponse.set_signed_cookie() signature. Backport of cd242d185bda9269913d4d101a7f704204ec907d from master 27 May 2018, 20:52:11 UTC
1824656 [1.11.x] Removed docs for obsolete ExceptionMiddleware. Backport of a6fb5b1fe022c5279aa275c70b5193f2a2fac5fe from master 27 May 2018, 17:38:42 UTC
999e823 [1.11.x] Post-release version bump. 02 May 2018, 01:56:43 UTC
2b882a4 [1.11.x] Bumped version for 1.11.13 release. 02 May 2018, 01:41:00 UTC
back to top