Commit Graph

12 Commits

Author SHA1 Message Date
Tim Graham 94c5da1d17 [2.0.x] Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in django.utils.text.Truncator.
Thanks James Davis for suggesting the fix.
2018-03-06 08:52:23 -05:00
Tim Graham e157315da3 [2.0.x] Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and urlizetrunc template filters.
Thanks Florian Apolloner for assisting with the patch.
2018-03-06 08:52:23 -05:00
Tim Graham 2da0064476 [2.0.x] Added stub release notes for security releases. 2018-03-06 08:52:15 -05:00
Christophe Mehay e91ff6e29c [2.0.x] Fixed #29176 -- Fixed AbstractBaseUser.normalize_username() crash if username isn't a string.
Backport of 40bac28faa from master
2018-03-02 11:48:43 -05:00
Tomáš Ehrlich 3cdc88ba53 [2.0.x] Fixed #29172 -- Fixed crash with Window expression in a subquery.
Backport of fa352626c2 from master
2018-03-01 10:51:54 -05:00
Claude Paroz 2126e9317e [2.0.x] Updated translations from Transifex 2018-02-28 20:05:45 +01:00
Mariusz Felisiak 10a20e4b37
[2.0.x] Fixed #29166 -- Fixed crash in When() expression with a list argument.
Thanks Matthew Pava for the report and Tim Graham and Carlton Gibson for
reviews.
Regression in 19b2dfd1bf.

Backport of 54f80430be from master
2018-02-28 18:10:58 +01:00
Tim Graham aeb35548dc [2.0.x] Fixed #29125 -- Made Q.deconstruct() deterministic with multiple keyword arguments.
Backport of b95c49c954 from master
2018-02-12 20:47:51 -05:00
Raphael Gaschignard 9b5ba2168c [2.0.x] Fixed #29118 -- Fixed crash with QuerySet.order_by(Exists(...)).
Backport of bf26f66029 from master
2018-02-10 19:00:37 -05:00
Manatsawin Hanmongkolchai a1286b5a64 [2.0.x] Fixed #29109 -- Fixed the admin time picker widget for the Thai locale.
Backport of 1a1264f149 from master
2018-02-10 16:06:03 -05:00
Simon Charette 8d03356d35 [2.0.x] Fixed #29108 -- Fixed crash in aggregation of distinct+ordered+sliced querysets.
Regression in 4acae21846.
Thanks Stephen Brooks for the report.

Backport of d61fe24601 from master
2018-02-08 10:00:12 -05:00
Simon Charette 58ad942736 [2.0.x] Added stub release notes for 2.0.3.
Backport of 7515e1f3fc from master
2018-02-05 10:13:07 -05:00