Commit Graph

16 Commits

Author SHA1 Message Date
Tim Graham f8aa2aa486 [1.7.x] Added dates to release notes.
Backport of b902be798e from master
2014-08-20 16:32:39 -04:00
Simon Charette 2b31342cdf [1.7.x] Prevented data leakage in contrib.admin via query string manipulation.
This is a security fix. Disclosure following shortly.
2014-08-20 14:42:48 -04:00
Preston Holmes 1a45d059c7 [1.7.x] Fixed #23066 -- Modified RemoteUserMiddleware to logout on REMOTE_USER change.
This is a security fix. Disclosure following shortly.
2014-08-20 14:42:48 -04:00
Tim Graham 3123f8452c [1.7.x] Fixed #23157 -- Removed O(n) algorithm when uploading duplicate file names.
This is a security fix. Disclosure following shortly.
2014-08-20 14:42:48 -04:00
Florian Apolloner bf650a2ee7 [1.7.x] Prevented reverse() from generating URLs pointing to other hosts.
This is a security fix. Disclosure following shortly.
2014-08-20 14:42:48 -04:00
Tim Graham 1c00c38b4a [1.7.x] Added release note stubs for 1.5.9 and 1.4.14. 2014-08-20 14:42:48 -04:00
Tim Graham 9dcb2cf4e6 [1.7.x] Added sphinx extension to ease generation of ticket links.
Backport of fca677fa43 from master
2014-08-19 17:45:59 -04:00
Claude Paroz 72ad014b6a [1.7.x] Fixed #22996 -- Prevented crash with unencoded query string
Thanks Jorge Carleitao for the report and Aymeric Augustin, Tim Graham
for the reviews.
Backport of fa02120d36 from master.
2014-08-19 22:30:22 +02:00
Claude Paroz 2cbafd814f [1.7.x] Complemented 1.6 release notes for 457c16d0d6
And accessorily added missing bits fixing #23293.
2014-08-15 10:14:20 +02:00
Claude Paroz 63ccf64079 [1.7.x] Fixed #23265 -- Used system-specific encoding in runserver
Thanks SpaceFox for the report.
Backport of 055d95fce0 from master.
2014-08-14 12:09:22 +02:00
Tim Graham 813f938093 [1.7.x] Forwardported 1.6.6 release note for #19107.
Backport of 7fcfefbc4a from master
2014-07-30 09:33:44 -04:00
Tim Graham dcedc453a2 [1.7.x] Forwardported 1.6.6 release notes for refs #20292.
Backport of f294f93a17 from master
2014-07-29 09:43:29 -04:00
Aymeric Augustin 5ca82ff71b [1.7.x] Fixed #23089 -- Fixed transaction handling in two management commands.
Previously, when createcachetable and flush operated on non-default
databases, they weren't atomic.

Backport of 753a22a635 from master
2014-07-24 18:13:12 -04:00
Tim Graham a8c4e0e93b [1.7.x] Added 1.6.6 release notes for #22998 (also forwardported those for #13794).
Backport of c62c480b2b from master
2014-07-16 13:35:41 -04:00
Tim Graham d107c7bd7d [1.7.x] Added refs #22514 to 1.6.6 release notes.
Backport of 1892ced10a from master
2014-06-20 18:47:54 -04:00
Tim Graham 0594d2d714 [1.7.x] Added stub release notes for 1.6.6.
Backport of 79e9da3d1e from master
2014-05-16 18:20:45 -04:00