Natalia 8769b44fda [4.2.x] Added CVE-2024-56374 to security archive. ...

Backport of f2a1dcaa53626ff11b921ef142b780a8fd746d32 from main.

2025-01-14 11:39:32 -03:00

..

0.95.txt

…

0.96.txt

[4.2.x] Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:39:03 +01:00

1.0-porting-guide.txt

[4.2.x] Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:39:03 +01:00

1.0.1.txt

…

1.0.2.txt

…

1.0.txt

[4.2.x] Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:39:03 +01:00

1.1.2.txt

…

1.1.3.txt

Removed hyphen from pre-/re- prefixes.

2022-04-28 10:44:14 +02:00

1.1.4.txt

…

1.1.txt

[4.2.x] Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:39:03 +01:00

1.2.1.txt

…

1.2.2.txt

…

1.2.3.txt

…

1.2.4.txt

Removed hyphen from pre-/re- prefixes.

2022-04-28 10:44:14 +02:00

1.2.5.txt

…

1.2.6.txt

…

1.2.7.txt

…

1.2.txt

[4.2.x] Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:39:03 +01:00

1.3.1.txt

…

1.3.2.txt

…

1.3.3.txt

…

1.3.4.txt

[4.2.x] Refs #34140 -- Corrected rst code-block and various formatting issues in docs.

2023-02-28 12:54:33 +01:00

1.3.5.txt

…

1.3.6.txt

…

1.3.7.txt

…

1.3.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

1.4.1.txt

…

1.4.2.txt

[4.2.x] Refs #34140 -- Corrected rst code-block and various formatting issues in docs.

2023-02-28 12:54:33 +01:00

1.4.3.txt

…

1.4.4.txt

…

1.4.5.txt

…

1.4.6.txt

…

1.4.7.txt

…

1.4.8.txt

…

1.4.9.txt

…

1.4.10.txt

…

1.4.11.txt

…

1.4.12.txt

…

1.4.13.txt

…

1.4.14.txt

…

1.4.15.txt

…

1.4.16.txt

…

1.4.17.txt

…

1.4.18.txt

…

1.4.19.txt

…

1.4.20.txt

…

1.4.21.txt

…

1.4.22.txt

…

1.4.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

1.5.1.txt

…

1.5.2.txt

…

1.5.3.txt

…

1.5.4.txt

…

1.5.5.txt

…

1.5.6.txt

…

1.5.7.txt

…

1.5.8.txt

…

1.5.9.txt

…

1.5.10.txt

…

1.5.11.txt

…

1.5.12.txt

…

1.5.txt

[4.2.x] Refs #34140 -- Corrected rst code-block and various formatting issues in docs.

2023-02-28 12:54:33 +01:00

1.6.1.txt

…

1.6.2.txt

…

1.6.3.txt

…

1.6.4.txt

…

1.6.5.txt

…

1.6.6.txt

…

1.6.7.txt

…

1.6.8.txt

…

1.6.9.txt

…

1.6.10.txt

…

1.6.11.txt

…

1.6.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

1.7.1.txt

…

1.7.2.txt

…

1.7.3.txt

…

1.7.4.txt

…

1.7.5.txt

…

1.7.6.txt

…

1.7.7.txt

…

1.7.8.txt

…

1.7.9.txt

…

1.7.10.txt

…

1.7.11.txt

…

1.7.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

1.8.1.txt

…

1.8.2.txt

[4.2.x] Added missing backticks in docs.

2023-07-21 12:55:10 +02:00

1.8.3.txt

…

1.8.4.txt

…

1.8.5.txt

…

1.8.6.txt

…

1.8.7.txt

…

1.8.8.txt

…

1.8.9.txt

…

1.8.10.txt

…

1.8.11.txt

…

1.8.12.txt

…

1.8.13.txt

…

1.8.14.txt

…

1.8.15.txt

…

1.8.16.txt

…

1.8.17.txt

…

1.8.18.txt

…

1.8.19.txt

…

1.8.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

1.9.1.txt

…

1.9.2.txt

…

1.9.3.txt

…

1.9.4.txt

…

1.9.5.txt

…

1.9.6.txt

…

1.9.7.txt

…

1.9.8.txt

…

1.9.9.txt

…

1.9.10.txt

…

1.9.11.txt

…

1.9.12.txt

…

1.9.13.txt

…

1.9.txt

[4.2.x] Added backticks to setuptools in docs.

2023-10-09 09:57:35 +02:00

1.10.1.txt

…

1.10.2.txt

…

1.10.3.txt

…

1.10.4.txt

…

1.10.5.txt

…

1.10.6.txt

…

1.10.7.txt

…

1.10.8.txt

…

1.10.txt

[4.2.x] Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:39:03 +01:00

1.11.1.txt

…

1.11.2.txt

…

1.11.3.txt

…

1.11.4.txt

…

1.11.5.txt

…

1.11.6.txt

…

1.11.7.txt

…

1.11.8.txt

…

1.11.9.txt

…

1.11.10.txt

…

1.11.11.txt

…

1.11.12.txt

…

1.11.13.txt

…

1.11.14.txt

…

1.11.15.txt

…

1.11.16.txt

…

1.11.17.txt

…

1.11.18.txt

…

1.11.19.txt

…

1.11.20.txt

…

1.11.21.txt

…

1.11.22.txt

…

1.11.23.txt

…

1.11.24.txt

…

1.11.25.txt

…

1.11.26.txt

…

1.11.27.txt

…

1.11.28.txt

…

1.11.29.txt

…

1.11.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

2.0.1.txt

…

2.0.2.txt

…

2.0.3.txt

…

2.0.4.txt

…

2.0.5.txt

…

2.0.6.txt

…

2.0.7.txt

…

2.0.8.txt

…

2.0.9.txt

…

2.0.10.txt

…

2.0.11.txt

…

2.0.12.txt

…

2.0.13.txt

…

2.0.txt

[4.2.x] Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:39:03 +01:00

2.1.1.txt

…

2.1.2.txt

…

2.1.3.txt

…

2.1.4.txt

…

2.1.5.txt

…

2.1.6.txt

…

2.1.7.txt

…

2.1.8.txt

…

2.1.9.txt

…

2.1.10.txt

…

2.1.11.txt

…

2.1.12.txt

…

2.1.13.txt

…

2.1.14.txt

…

2.1.15.txt

…

2.1.txt

[4.2.x] Fixed references to django.core.cache in docs.

2023-05-22 14:02:28 +02:00

2.2.1.txt

…

2.2.2.txt

…

2.2.3.txt

…

2.2.4.txt

Fixed "nulls characters" typo in docs.

2023-01-16 07:54:00 +01:00

2.2.5.txt

…

2.2.6.txt

…

2.2.7.txt

…

2.2.8.txt

…

2.2.9.txt

…

2.2.10.txt

…

2.2.11.txt

…

2.2.12.txt

…

2.2.13.txt

…

2.2.14.txt

…

2.2.15.txt

…

2.2.16.txt

…

2.2.17.txt

…

2.2.18.txt

…

2.2.19.txt

…

2.2.20.txt

…

2.2.21.txt

…

2.2.22.txt

…

2.2.23.txt

…

2.2.24.txt

…

2.2.25.txt

…

2.2.26.txt

…

2.2.27.txt

…

2.2.28.txt

Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.

2022-04-11 08:59:58 +02:00

2.2.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

3.0.1.txt

…

3.0.2.txt

…

3.0.3.txt

…

3.0.4.txt

…

3.0.5.txt

…

3.0.6.txt

…

3.0.7.txt

…

3.0.8.txt

…

3.0.9.txt

…

3.0.10.txt

…

3.0.11.txt

…

3.0.12.txt

…

3.0.13.txt

…

3.0.14.txt

…

3.0.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

3.1.1.txt

Removed hyphen from pre-/re- prefixes.

2022-04-28 10:44:14 +02:00

3.1.2.txt

…

3.1.3.txt

…

3.1.4.txt

…

3.1.5.txt

…

3.1.6.txt

…

3.1.7.txt

…

3.1.8.txt

…

3.1.9.txt

…

3.1.10.txt

…

3.1.11.txt

…

3.1.12.txt

…

3.1.13.txt

…

3.1.14.txt

…

3.1.txt

[4.2.x] Fixed references to django.core.cache in docs.

2023-05-22 14:02:28 +02:00

3.2.1.txt

Fixed typo in docs/releases/3.2.1.txt.

2022-09-19 05:19:01 +02:00

3.2.2.txt

…

3.2.3.txt

…

3.2.4.txt

…

3.2.5.txt

…

3.2.6.txt

…

3.2.7.txt

…

3.2.8.txt

…

3.2.9.txt

…

3.2.10.txt

…

3.2.11.txt

…

3.2.12.txt

…

3.2.13.txt

Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.

2022-04-11 08:59:58 +02:00

3.2.14.txt

Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against SQL injection.

2022-07-04 08:13:41 +02:00

3.2.15.txt

Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.

2022-08-03 08:46:31 +02:00

3.2.16.txt

Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.

2022-10-04 09:10:04 +02:00

3.2.17.txt

[4.2.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.

2023-02-01 09:45:07 +01:00

3.2.18.txt

[4.2.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.

2023-02-14 08:21:18 +01:00

3.2.19.txt

[4.2.x] Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of validation when uploading multiple files using one form field.

2023-05-03 13:43:16 +02:00

3.2.20.txt

[4.2.x] Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator and URLValidator.

2023-07-03 08:19:23 +02:00

3.2.21.txt

[4.2.x] Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri().

2023-09-04 12:05:35 +02:00

3.2.22.txt

[4.2.x] Fixed CVE-2023-43665 -- Mitigated potential DoS in django.utils.text.Truncator when truncating HTML text.

2023-10-04 09:39:49 -03:00

3.2.23.txt

[4.2.x] Fixed CVE-2023-46695 -- Fixed potential DoS in UsernameField on Windows.

2023-11-01 06:19:20 +01:00

3.2.24.txt

[4.2.x] Fixed CVE-2024-24680 -- Mitigated potential DoS in intcomma template filter.

2024-02-06 09:56:20 -03:00

3.2.25.txt

[4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().

2024-03-04 08:36:56 +01:00

3.2.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

4.0.1.txt

Refs #33990 -- Renamed SimpleTestCase.assertFormsetError() to assertFormSetError().

2022-10-07 11:22:16 +02:00

4.0.2.txt

…

4.0.3.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

4.0.4.txt

Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.

2022-04-11 08:59:58 +02:00

4.0.5.txt

Updated release date for Django 4.0.5.

2022-06-01 12:25:33 +02:00

4.0.6.txt

Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against SQL injection.

2022-07-04 08:13:41 +02:00

4.0.7.txt

Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.

2022-08-03 08:46:31 +02:00

4.0.8.txt

Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.

2022-10-04 09:10:04 +02:00

4.0.9.txt

[4.2.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.

2023-02-01 09:45:07 +01:00

4.0.10.txt

[4.2.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.

2023-02-14 08:21:18 +01:00

4.0.txt

[4.2.x] Used extlinks for PyPI links.

2023-04-17 07:44:29 +02:00

4.1.1.txt

Added release date for 4.1.1.

2022-09-05 05:21:23 +02:00

4.1.2.txt

Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.

2022-10-04 09:10:04 +02:00

4.1.3.txt

Added release date for 4.1.3.

2022-11-01 06:54:19 +01:00

4.1.4.txt

Added release date for 4.1.4.

2022-12-06 09:56:43 +01:00

4.1.5.txt

Added release date for 4.1.5.

2023-01-02 08:10:59 +01:00

4.1.6.txt

[4.2.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.

2023-02-01 09:45:07 +01:00

4.1.7.txt

[4.2.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.

2023-02-14 08:21:18 +01:00

4.1.8.txt

[4.2.x] Added release date for 4.1.8.

2023-04-05 06:19:12 +02:00

4.1.9.txt

[4.2.x] Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of validation when uploading multiple files using one form field.

2023-05-03 13:43:16 +02:00

4.1.10.txt

[4.2.x] Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator and URLValidator.

2023-07-03 08:19:23 +02:00

4.1.11.txt

[4.2.x] Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri().

2023-09-04 12:05:35 +02:00

4.1.12.txt

[4.2.x] Fixed CVE-2023-43665 -- Mitigated potential DoS in django.utils.text.Truncator when truncating HTML text.

2023-10-04 09:39:49 -03:00

4.1.13.txt

[4.2.x] Fixed CVE-2023-46695 -- Fixed potential DoS in UsernameField on Windows.

2023-11-01 06:19:20 +01:00

4.1.txt

[4.2.x] Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:39:03 +01:00

4.2.1.txt

[4.2.x] Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of validation when uploading multiple files using one form field.

2023-05-03 13:43:16 +02:00

4.2.2.txt

[4.2.x] Added release date for 4.2.2.

2023-06-05 08:26:28 -03:00

4.2.3.txt

[4.2.x] Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator and URLValidator.

2023-07-03 08:19:23 +02:00

4.2.4.txt

[4.2.x] Added release date for 4.2.4.

2023-08-01 13:47:01 -03:00

4.2.5.txt

[4.2.x] Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri().

2023-09-04 12:05:35 +02:00

4.2.6.txt

[4.2.x] Refs #34840 -- Improved release note describing index regression.

2023-10-15 10:28:07 +02:00

4.2.7.txt

[4.2.x] Fixed CVE-2023-46695 -- Fixed potential DoS in UsernameField on Windows.

2023-11-01 06:19:20 +01:00

4.2.8.txt

[4.2.x] Added release date for 4.2.8.

2023-12-04 09:25:56 +01:00

4.2.9.txt

[4.2.x] Added release date for 4.2.9.

2024-01-02 09:59:12 +01:00

4.2.10.txt

[4.2.x] Fixed CVE-2024-24680 -- Mitigated potential DoS in intcomma template filter.

2024-02-06 09:56:20 -03:00

4.2.11.txt

[4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().

2024-03-04 08:36:56 +01:00

4.2.12.txt

[4.2.x] Added release date for 4.2.12.

2024-05-06 14:44:17 +02:00

4.2.13.txt

[4.2.x] Added release notes for 4.2.13.

2024-05-07 17:35:16 +02:00

4.2.14.txt

[4.2.x] Fixed CVE-2024-39614 -- Mitigated potential DoS in get_supported_language_variant().

2024-07-09 10:40:50 -03:00

4.2.15.txt

[4.2.x] Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection attacks against JSON fields.

2024-07-31 16:12:35 +02:00

4.2.16.txt

[4.2.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when email sending fails.

2024-09-03 09:42:25 -03:00

4.2.17.txt

[4.2.x] Fixed CVE-2024-53908 -- Prevented SQL injections in direct HasKeyLookup usage on Oracle.

2024-12-04 14:32:17 +01:00

4.2.18.txt

[4.2.x] Fixed CVE-2024-56374 -- Mitigated potential DoS in IPv6 validation.

2025-01-14 09:08:01 -03:00

4.2.txt

[4.2.x] Fixed #34978, Refs #31331 -- Added backward incompatibility note about raw aggregations on MySQL.

2023-11-27 12:44:18 -03:00

index.txt

[4.2.x] Added stub release notes and release date for 4.2.18.

2025-01-07 12:37:42 -03:00

security.txt

[4.2.x] Added CVE-2024-56374 to security archive.

2025-01-14 11:39:32 -03:00