Tobias Bengfort 350455b666 Fixed #33606 -- Cleansed sessionid cookie in error reports. ...

Co-authored-by: Simon Charette <charette.s@gmail.com>

2022-10-26 14:39:58 +02:00

..

0.95.txt

Added missing backticks to function names.

2022-03-17 11:10:03 +01:00

0.96.txt

Refs #32720 -- Used :commit: and :source: role in old release notes.

2021-05-17 07:36:57 +02:00

1.0-porting-guide.txt

Changed some words to use inline markup.

2022-03-10 10:18:31 +01:00

1.0.1.txt

…

1.0.2.txt

…

1.0.txt

Removed hyphen from pre-/re- prefixes.

2022-04-28 10:44:14 +02:00

1.1.2.txt

…

1.1.3.txt

Removed hyphen from pre-/re- prefixes.

2022-04-28 10:44:14 +02:00

1.1.4.txt

…

1.1.txt

Fixed 32956 -- Lowercased spelling of "web" and "web framework" where appropriate.

2021-07-29 06:24:12 +02:00

1.2.1.txt

Used 🎫 role in all tickets links.

2019-11-26 14:02:24 +01:00

1.2.2.txt

…

1.2.3.txt

Refs #32720 -- Used :commit: and :source: role in old release notes.

2021-05-17 07:36:57 +02:00

1.2.4.txt

Removed hyphen from pre-/re- prefixes.

2022-04-28 10:44:14 +02:00

1.2.5.txt

Refs #32720 -- Used :commit: and :source: role in old release notes.

2021-05-17 07:36:57 +02:00

1.2.6.txt

…

1.2.7.txt

…

1.2.txt

Corrected multiply defined labels in docs.

2021-11-04 10:46:01 +01:00

1.3.1.txt

…

1.3.2.txt

…

1.3.3.txt

…

1.3.4.txt

Added backticks to code literals in various docs.

2022-04-28 10:44:14 +02:00

1.3.5.txt

…

1.3.6.txt

Fixed 32956 -- Lowercased spelling of "web" and "web framework" where appropriate.

2021-07-29 06:24:12 +02:00

1.3.7.txt

…

1.3.txt

Refs #32956 -- Changed docs to treat the acronym HTTP phonetically.

2021-10-18 21:00:28 +02:00

1.4.1.txt

…

1.4.2.txt

Added backticks to code literals in various docs.

2022-04-28 10:44:14 +02:00

1.4.3.txt

…

1.4.4.txt

Fixed 32956 -- Lowercased spelling of "web" and "web framework" where appropriate.

2021-07-29 06:24:12 +02:00

1.4.5.txt

…

1.4.6.txt

…

1.4.7.txt

…

1.4.8.txt

…

1.4.9.txt

…

1.4.10.txt

…

1.4.11.txt

…

1.4.12.txt

…

1.4.13.txt

Prevented (and corrected) single backtick usage in docs.

2020-04-01 14:55:11 +02:00

1.4.14.txt

…

1.4.15.txt

…

1.4.16.txt

…

1.4.17.txt

…

1.4.18.txt

Prevented (and corrected) single backtick usage in docs.

2020-04-01 14:55:11 +02:00

1.4.19.txt

…

1.4.20.txt

…

1.4.21.txt

…

1.4.22.txt

…

1.4.txt

Added backticks to code literals in various docs.

2022-04-28 10:44:14 +02:00

1.5.1.txt

Added documentation extlink for bugs.python.org.

2021-02-17 14:24:42 +01:00

1.5.2.txt

Capitalized Unicode in docs, strings, and comments.

2020-04-20 12:10:33 +02:00

1.5.3.txt

Changed docs and a code comment to use gender-neutral pronouns.

2020-11-13 22:26:30 +01:00

1.5.4.txt

…

1.5.5.txt

…

1.5.6.txt

…

1.5.7.txt

…

1.5.8.txt

Prevented (and corrected) single backtick usage in docs.

2020-04-01 14:55:11 +02:00

1.5.9.txt

…

1.5.10.txt

…

1.5.11.txt

…

1.5.12.txt

…

1.5.txt

Changed "ie." to "i.e." in docs.

2022-04-28 10:37:06 +02:00

1.6.1.txt

Changed some words to use inline markup.

2022-03-10 10:18:31 +01:00

1.6.2.txt

…

1.6.3.txt

…

1.6.4.txt

…

1.6.5.txt

Prevented (and corrected) single backtick usage in docs.

2020-04-01 14:55:11 +02:00

1.6.6.txt

Capitalized Unicode in docs, strings, and comments.

2020-04-20 12:10:33 +02:00

1.6.7.txt

…

1.6.8.txt

…

1.6.9.txt

…

1.6.10.txt

Prevented (and corrected) single backtick usage in docs.

2020-04-01 14:55:11 +02:00

1.6.11.txt

Added documentation extlink for bugs.python.org.

2021-02-17 14:24:42 +01:00

1.6.txt

Refs #33990 -- Renamed TransactionTestCase.assertQuerysetEqual() to assertQuerySetEqual().

2022-10-08 08:07:38 +02:00

1.7.1.txt

Capitalized Unicode in docs, strings, and comments.

2020-04-20 12:10:33 +02:00

1.7.2.txt

Capitalized Unicode in docs, strings, and comments.

2020-04-20 12:10:33 +02:00

1.7.3.txt

Prevented (and corrected) single backtick usage in docs.

2020-04-01 14:55:11 +02:00

1.7.4.txt

…

1.7.5.txt

…

1.7.6.txt

…

1.7.7.txt

Added documentation extlink for bugs.python.org.

2021-02-17 14:24:42 +01:00

1.7.8.txt

…

1.7.9.txt

…

1.7.10.txt

…

1.7.11.txt

…

1.7.txt

Added missing backticks to function names.

2022-03-17 11:10:03 +01:00

1.8.1.txt

Fixed #31534 -- Deprecated django.conf.urls.url().

2020-05-05 07:34:34 +02:00

1.8.2.txt

…

1.8.3.txt

Prevented (and corrected) single backtick usage in docs.

2020-04-01 14:55:11 +02:00

1.8.4.txt

…

1.8.5.txt

…

1.8.6.txt

Prevented (and corrected) single backtick usage in docs.

2020-04-01 14:55:11 +02:00

1.8.7.txt

…

1.8.8.txt

Refs #32720 -- Updated various links in docs to avoid redirects and use HTTPS.

2021-05-17 09:46:09 +02:00

1.8.9.txt

…

1.8.10.txt

…

1.8.11.txt

…

1.8.12.txt

…

1.8.13.txt

…

1.8.14.txt

…

1.8.15.txt

…

1.8.16.txt

…

1.8.17.txt

…

1.8.18.txt

…

1.8.19.txt

…

1.8.txt

Fixed #32964 -- Corrected 'setup'/'set up' usage in docs.

2021-08-17 12:18:07 +02:00

1.9.1.txt

Changed some words to use inline markup.

2022-03-10 10:18:31 +01:00

1.9.2.txt

…

1.9.3.txt

…

1.9.4.txt

…

1.9.5.txt

…

1.9.6.txt

…

1.9.7.txt

…

1.9.8.txt

…

1.9.9.txt

…

1.9.10.txt

…

1.9.11.txt

…

1.9.12.txt

…

1.9.13.txt

…

1.9.txt

Fixed docs build with sphinxcontrib-spelling 7.5.0+.

2022-05-31 11:17:01 +02:00

1.10.1.txt

…

1.10.2.txt

…

1.10.3.txt

…

1.10.4.txt

…

1.10.5.txt

…

1.10.6.txt

…

1.10.7.txt

…

1.10.8.txt

…

1.10.txt

Fixed #32873 -- Deprecated settings.USE_L10N.

2021-09-14 12:05:43 +02:00

1.11.1.txt

Corrected docs spelling of PgBouncer.

2020-04-01 14:55:11 +02:00

1.11.2.txt

…

1.11.3.txt

…

1.11.4.txt

…

1.11.5.txt

…

1.11.6.txt

…

1.11.7.txt

…

1.11.8.txt

…

1.11.9.txt

…

1.11.10.txt

…

1.11.11.txt

…

1.11.12.txt

…

1.11.13.txt

…

1.11.14.txt

…

1.11.15.txt

…

1.11.16.txt

…

1.11.17.txt

…

1.11.18.txt

…

1.11.19.txt

…

1.11.20.txt

…

1.11.21.txt

…

1.11.22.txt

…

1.11.23.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

1.11.24.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

1.11.25.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

1.11.26.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

1.11.27.txt

Fixed CVE-2019-19844 -- Used verified user email for password reset requests.

2019-12-18 09:11:39 +01:00

1.11.28.txt

Fixed CVE-2020-7471 -- Properly escaped StringAgg(delimiter) parameter.

2020-02-03 08:49:13 +01:00

1.11.29.txt

Fixed typo in docs/releases/1.11.29.txt.

2020-03-04 10:46:43 +01:00

1.11.txt

Fixed #33872 -- Deprecated django.contrib.postgres.fields.CIText/CICharField/CIEmailField/CITextField.

2022-08-03 11:42:51 +02:00

2.0.1.txt

…

2.0.2.txt

…

2.0.3.txt

…

2.0.4.txt

Prevented (and corrected) single backtick usage in docs.

2020-04-01 14:55:11 +02:00

2.0.5.txt

…

2.0.6.txt

…

2.0.7.txt

…

2.0.8.txt

…

2.0.9.txt

…

2.0.10.txt

…

2.0.11.txt

…

2.0.12.txt

…

2.0.13.txt

…

2.0.txt

Updated Oracle docs links to Oracle 21c.

2022-03-29 09:41:57 +02:00

2.1.1.txt

…

2.1.2.txt

…

2.1.3.txt

…

2.1.4.txt

…

2.1.5.txt

…

2.1.6.txt

…

2.1.7.txt

…

2.1.8.txt

…

2.1.9.txt

…

2.1.10.txt

…

2.1.11.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

2.1.12.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

2.1.13.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

2.1.14.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

2.1.15.txt

Preferred usage of among/while to amongst/whilst.

2020-06-03 21:02:48 +02:00

2.1.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

2.2.1.txt

Used :envvar: role and .. envvar:: directive in various docs.

2020-05-13 09:14:40 +02:00

2.2.2.txt

…

2.2.3.txt

…

2.2.4.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

2.2.5.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

2.2.6.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

2.2.7.txt

Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.

2021-01-14 17:50:04 +01:00

2.2.8.txt

Preferred usage of among/while to amongst/whilst.

2020-06-03 21:02:48 +02:00

2.2.9.txt

Fixed CVE-2019-19844 -- Used verified user email for password reset requests.

2019-12-18 09:11:39 +01:00

2.2.10.txt

Fixed CVE-2020-7471 -- Properly escaped StringAgg(delimiter) parameter.

2020-02-03 08:49:13 +01:00

2.2.11.txt

Fixed CVE-2020-9402 -- Properly escaped tolerance parameter in GIS functions and aggregates on Oracle.

2020-03-04 09:04:50 +01:00

2.2.12.txt

Added release dates for 2.1.12 and 3.0.5.

2020-04-01 09:14:56 +02:00

2.2.13.txt

Fixed CVE-2020-13254 -- Enforced cache key validation in memcached backends.

2020-06-03 09:24:26 +02:00

2.2.14.txt

Added release date for 2.2.14 and 3.0.8.

2020-07-01 06:16:32 +02:00

2.2.15.txt

Added release date for 2.2.15 and 3.0.9.

2020-08-03 08:52:28 +02:00

2.2.16.txt

Added release date for 3.1.1, 3.0.10, and 2.2.16.

2020-09-01 09:56:42 +02:00

2.2.17.txt

Set release date for 3.1.3, 3.0.11, and 2.2.17.

2020-11-02 08:35:24 +01:00

2.2.18.txt

Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().

2021-02-01 09:07:36 +01:00

2.2.19.txt

Refs CVE-2021-23336 -- Updated tests and release notes for affected versions.

2021-02-19 09:03:06 +01:00

2.2.20.txt

Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files.

2021-04-06 08:15:17 +02:00

2.2.21.txt

Refs #32718 -- Corrected CVE-2021-31542 release notes.

2021-05-12 10:42:01 +02:00

2.2.22.txt

Fixed #32713, Fixed CVE-2021-32052 -- Prevented newlines and tabs from being accepted in URLValidator on Python 3.9.5+.

2021-05-06 08:45:23 +02:00

2.2.23.txt

Fixed #32718 -- Relaxed file name validation in FileField.

2021-05-13 08:53:44 +02:00

2.2.24.txt

Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.

2021-06-02 10:58:39 +02:00

2.2.25.txt

Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.

2021-12-07 06:28:08 +01:00

2.2.26.txt

Corrected merge error in release notes.

2022-01-04 10:50:23 +01:00

2.2.27.txt

Fixed typo in release notes.

2022-02-02 07:17:57 +01:00

2.2.28.txt

Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.

2022-04-11 08:59:58 +02:00

2.2.txt

Fixed #32964 -- Corrected 'setup'/'set up' usage in docs.

2021-08-17 12:18:07 +02:00

3.0.1.txt

Used :envvar: role and .. envvar:: directive in various docs.

2020-05-13 09:14:40 +02:00

3.0.2.txt

Added release date for 3.0.2.

2020-01-02 07:55:53 +01:00

3.0.3.txt

Added release date for 3.0.3.

2020-02-03 08:52:16 +01:00

3.0.4.txt

Fixed CVE-2020-9402 -- Properly escaped tolerance parameter in GIS functions and aggregates on Oracle.

2020-03-04 09:04:50 +01:00

3.0.5.txt

Added release dates for 2.1.12 and 3.0.5.

2020-04-01 09:14:56 +02:00

3.0.6.txt

Fixed typo in docs/releases/3.0.6.txt.

2020-05-04 07:42:25 +02:00

3.0.7.txt

Fixed CVE-2020-13254 -- Enforced cache key validation in memcached backends.

2020-06-03 09:24:26 +02:00

3.0.8.txt

Added release date for 2.2.14 and 3.0.8.

2020-07-01 06:16:32 +02:00

3.0.9.txt

Added release date for 2.2.15 and 3.0.9.

2020-08-03 08:52:28 +02:00

3.0.10.txt

Added release date for 3.1.1, 3.0.10, and 2.2.16.

2020-09-01 09:56:42 +02:00

3.0.11.txt

Set release date for 3.1.3, 3.0.11, and 2.2.17.

2020-11-02 08:35:24 +01:00

3.0.12.txt

Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().

2021-02-01 09:07:36 +01:00

3.0.13.txt

Refs CVE-2021-23336 -- Updated tests and release notes for affected versions.

2021-02-19 09:03:06 +01:00

3.0.14.txt

Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files.

2021-04-06 08:15:17 +02:00

3.0.txt

Refs #32956 -- Changed "afterwards" to "afterward" in docs and comments.

2021-07-27 10:41:51 +02:00

3.1.1.txt

Removed hyphen from pre-/re- prefixes.

2022-04-28 10:44:14 +02:00

3.1.2.txt

Added release date for 3.1.2.

2020-10-01 07:22:28 +02:00

3.1.3.txt

Set release date for 3.1.3, 3.0.11, and 2.2.17.

2020-11-02 08:35:24 +01:00

3.1.4.txt

Added release date for 3.1.4.

2020-12-01 06:24:16 +01:00

3.1.5.txt

Added release date for 3.1.5.

2021-01-04 08:31:51 +01:00

3.1.6.txt

Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().

2021-02-01 09:07:36 +01:00

3.1.7.txt

Refs CVE-2021-23336 -- Updated tests and release notes for affected versions.

2021-02-19 09:03:06 +01:00

3.1.8.txt

Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files.

2021-04-06 08:15:17 +02:00

3.1.9.txt

Refs #32718 -- Corrected CVE-2021-31542 release notes.

2021-05-12 10:42:01 +02:00

3.1.10.txt

Fixed #32713, Fixed CVE-2021-32052 -- Prevented newlines and tabs from being accepted in URLValidator on Python 3.9.5+.

2021-05-06 08:45:23 +02:00

3.1.11.txt

Fixed #32718 -- Relaxed file name validation in FileField.

2021-05-13 08:53:44 +02:00

3.1.12.txt

Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.

2021-06-02 10:58:39 +02:00

3.1.13.txt

Fixed typo in docs/releases/3.1.13.txt.

2021-07-16 20:30:21 +02:00

3.1.14.txt

Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.

2021-12-07 06:28:08 +01:00

3.1.txt

Fixed #32348, Refs #29087 -- Corrected tutorial for updated deleting inlines UI.

2021-01-27 08:44:36 +01:00

3.2.1.txt

Fixed typo in docs/releases/3.2.1.txt.

2022-09-19 05:19:01 +02:00

3.2.2.txt

Fixed #32713, Fixed CVE-2021-32052 -- Prevented newlines and tabs from being accepted in URLValidator on Python 3.9.5+.

2021-05-06 08:45:23 +02:00

3.2.3.txt

Fixed #32718 -- Relaxed file name validation in FileField.

2021-05-13 08:53:44 +02:00

3.2.4.txt

Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.

2021-06-02 10:58:39 +02:00

3.2.5.txt

Forwardported release notes for CVE-2021-35042.

2021-07-01 09:42:54 +02:00

3.2.6.txt

Confirmed release date for Django 3.2.6.

2021-08-02 06:55:40 +02:00

3.2.7.txt

Added release date for 3.2.7.

2021-09-01 07:40:01 +02:00

3.2.8.txt

Added release date for 3.2.7.

2021-10-05 09:07:26 +02:00

3.2.9.txt

Added release date for 3.2.9.

2021-11-01 10:18:49 +01:00

3.2.10.txt

Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.

2021-12-07 06:28:08 +01:00

3.2.11.txt

Corrected merge error in release notes.

2022-01-04 10:50:23 +01:00

3.2.12.txt

Fixed typo in release notes.

2022-02-02 07:17:57 +01:00

3.2.13.txt

Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.

2022-04-11 08:59:58 +02:00

3.2.14.txt

Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against SQL injection.

2022-07-04 08:13:41 +02:00

3.2.15.txt

Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.

2022-08-03 08:46:31 +02:00

3.2.16.txt

Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.

2022-10-04 09:10:04 +02:00

3.2.txt

Refs #33990 -- Renamed TransactionTestCase.assertQuerysetEqual() to assertQuerySetEqual().

2022-10-08 08:07:38 +02:00

4.0.1.txt

Refs #33990 -- Renamed SimpleTestCase.assertFormsetError() to assertFormSetError().

2022-10-07 11:22:16 +02:00

4.0.2.txt

Fixed typo in release notes.

2022-02-02 07:17:57 +01:00

4.0.3.txt

Updated release date for version 4.0.3.

2022-03-01 09:32:18 +01:00

4.0.4.txt

Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.

2022-04-11 08:59:58 +02:00

4.0.5.txt

Updated release date for Django 4.0.5.

2022-06-01 12:25:33 +02:00

4.0.6.txt

Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against SQL injection.

2022-07-04 08:13:41 +02:00

4.0.7.txt

Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.

2022-08-03 08:46:31 +02:00

4.0.8.txt

Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.

2022-10-04 09:10:04 +02:00

4.0.txt

Fixed #33789 -- Doc'd changes in quoting table/column names on Oracle in Django 4.0.

2022-06-21 09:09:41 +02:00

4.1.1.txt

Added release date for 4.1.1.

2022-09-05 05:21:23 +02:00

4.1.2.txt

Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.

2022-10-04 09:10:04 +02:00

4.1.3.txt

Fixed #34085 -- Made management commands don't use black for non-Python files.

2022-10-20 13:38:31 -07:00

4.1.txt

Refs #33990 -- Renamed SimpleTestCase.assertFormsetError() to assertFormSetError().

2022-10-07 11:22:16 +02:00

4.2.txt

Fixed #33606 -- Cleansed sessionid cookie in error reports.

2022-10-26 14:39:58 +02:00

index.txt

Added stub release notes for 4.1.3 release.

2022-10-04 09:49:23 +02:00

security.txt

Added CVE-2022-36359 to security archive.

2022-10-04 10:12:11 +02:00