diff --git a/django/__init__.py b/django/__init__.py index f7f270002c..10e683e780 100644 --- a/django/__init__.py +++ b/django/__init__.py @@ -1,4 +1,4 @@ -VERSION = (1, 5, 6, 'alpha', 0) +VERSION = (1, 5, 6, 'final', 0) def get_version(*args, **kwargs): # Don't litter django/__init__.py with all the get_version stuff. diff --git a/docs/conf.py b/docs/conf.py index 01e660aef4..1ca303a42a 100644 --- a/docs/conf.py +++ b/docs/conf.py @@ -52,7 +52,7 @@ copyright = 'Django Software Foundation and contributors' # built documents. # # The short X.Y version. -version = '1.5.5' +version = '1.5.6' # The full version, including alpha/beta/rc tags. release = version # The next version to be released diff --git a/docs/releases/security.txt b/docs/releases/security.txt index 474eeee26d..3cc7e82628 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -448,3 +448,20 @@ Versions affected * Django 1.4 `(patch `__ and `Python compatibility fix) `__ * Django 1.5 `(patch) `__ + + +April 21, 2014 - CVE-2014-2014-0472 +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +`CVE-2014-0472 `_: Unexpected code execution using ``reverse()``. `Full description `_ + +Versions affected +----------------- + +* Django 1.4 `(patch `_) + +* Django 1.5 `(patch `_) + +* Django 1.6 `(patch `_) + +* Django 1.7 `(patch `_) diff --git a/setup.py b/setup.py index 4682031af9..1efc45f6e3 100644 --- a/setup.py +++ b/setup.py @@ -85,7 +85,7 @@ setup( author_email='foundation@djangoproject.com', description=('A high-level Python Web framework that encourages ' 'rapid development and clean, pragmatic design.'), - download_url='https://www.djangoproject.com/m/releases/1.5/Django-1.5.5.tar.gz', + download_url='https://www.djangoproject.com/m/releases/1.5/Django-1.5.6.tar.gz', license='BSD', packages=packages, package_data=package_data,