1
0
mirror of https://github.com/django/django.git synced 2025-07-09 20:29:12 +00:00

12 Commits

Author SHA1 Message Date
Mariusz Felisiak
9f75e2e562 [3.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.
validate_ipv4_address() was affected only on Python < 3.9.5, see [1].
URLValidator() uses a regular expressions and it was affected on all
Python versions.

[1] https://bugs.python.org/issue36384
2021-06-02 10:44:39 +02:00
Florian Apolloner
dfaba12cda [3.2.x] Fixed CVE-2021-33203 -- Fixed potential path-traversal via admindocs' TemplateDetailView. 2021-06-02 10:44:39 +02:00
Carlton Gibson
aed1409558 [3.2.x] Confirmed release date for Django 3.2.4, 3.1.12, and 2.2.24.
Backport of f66ae7a2d5558fe88ddfe639a610573872be6628 from main
2021-06-02 10:20:17 +02:00
Mariusz Felisiak
94675a7633 [3.2.x] Fixed #32793 -- Fixed loss of precision for temporal operations with DecimalFields on MySQL.
Regression in 1e38f1191de21b6e96736f58df57dfb851a28c1f.

Thanks Mohsen Tamiz for the report.
Backport of e703b152c6148ddda1b072a4353e9a41dca87f90 from main
2021-06-01 15:13:10 +02:00
Mariusz Felisiak
246a31a843 [3.2.x] Fixed #32783 -- Fixed crash of autoreloader when __main__ module doesn't have __spec__ attribute.
Regression in ec6d2531c59466924b645f314ac33f54470d7ac3.

Thanks JonathanNickelson for the report.
Backport of 12b19a1d76e1a6f80923c8358290d605dacd65d4 from main
2021-05-26 11:20:05 +02:00
Carlton Gibson
4ba4c07e4e [3.2.x] Added stub release notes and date for Django 3.2.4, 3.1.12, and 2.2.24.
Backport of b46dbd4e3e255223078ae0028934ea986e19ebc1 from main
2021-05-26 10:17:27 +02:00
Hasan Ramezani
c0d506f5ef [3.2.x] Fixed #32744 -- Normalized to pathlib.Path in autoreloader check for template changes.
Backport of 68357b2ca9e88c40fc00d848799813241be39129 from main
2021-05-26 10:08:58 +02:00
Carlton Gibson
a173202dd4 [3.2.x] Fixed #32740 -- Caught possible exception when initializing colorama.
Backport of c2e6047c725e26987c87e2be59f2ab4bf9828fa5 from main
2021-05-19 11:16:13 +02:00
Mariusz Felisiak
41e2aa7eb2 [3.2.x] Fixed #32747 -- Prevented initialization of unused caches.
Thanks Alexander Ebral for the report.

Regression in 98e05ccde440cc9b768952cc10bc8285f4924e1f.

Backport of 958cdf65ae90d26236d1815bbba804729595ec7a from main
2021-05-18 20:23:26 +02:00
Rust Saiargaliev
349bb58b8a [3.2.x] Fixed #32733 -- Skipped system check for specifying type of auto-created primary keys on abstract models.
Regression in b5e12d490af3debca8c55ab3c1698189fdedbbdb.

Backport of a24fed399ced6be2e9dce4cf28db00c3ee21a21c from main
2021-05-18 13:20:55 +02:00
Slava Skvortsov
ce78bc9808 [3.2.x] Fixed #32754 -- Made AdminSite.catch_all_view() respect SCRIPT_NAME.
Regression in ba31b0103442ac891fb3cb98f316781254e366c3.

Backport of f7691d4812c578e696635718e67639d2e08eac40 from main
2021-05-18 09:58:49 +02:00
Mariusz Felisiak
1037825eed [3.2.x] Added stub release notes for Django 3.2.4.
Backport of 820408d842a07202a80e6ef7f7a57ec6258d88e6 from main
2021-05-13 09:45:39 +02:00