Commit Graph

12 Commits

Author SHA1 Message Date
Mariusz Felisiak 9f75e2e562 [3.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.
validate_ipv4_address() was affected only on Python < 3.9.5, see [1].
URLValidator() uses a regular expressions and it was affected on all
Python versions.

[1] https://bugs.python.org/issue36384
2021-06-02 10:44:39 +02:00
Florian Apolloner dfaba12cda [3.2.x] Fixed CVE-2021-33203 -- Fixed potential path-traversal via admindocs' TemplateDetailView. 2021-06-02 10:44:39 +02:00
Carlton Gibson aed1409558 [3.2.x] Confirmed release date for Django 3.2.4, 3.1.12, and 2.2.24.
Backport of f66ae7a2d5 from main
2021-06-02 10:20:17 +02:00
Mariusz Felisiak 94675a7633 [3.2.x] Fixed #32793 -- Fixed loss of precision for temporal operations with DecimalFields on MySQL.
Regression in 1e38f1191d.

Thanks Mohsen Tamiz for the report.
Backport of e703b152c6 from main
2021-06-01 15:13:10 +02:00
Mariusz Felisiak 246a31a843 [3.2.x] Fixed #32783 -- Fixed crash of autoreloader when __main__ module doesn't have __spec__ attribute.
Regression in ec6d2531c5.

Thanks JonathanNickelson for the report.
Backport of 12b19a1d76 from main
2021-05-26 11:20:05 +02:00
Carlton Gibson 4ba4c07e4e [3.2.x] Added stub release notes and date for Django 3.2.4, 3.1.12, and 2.2.24.
Backport of b46dbd4e3e from main
2021-05-26 10:17:27 +02:00
Hasan Ramezani c0d506f5ef [3.2.x] Fixed #32744 -- Normalized to pathlib.Path in autoreloader check for template changes.
Backport of 68357b2ca9 from main
2021-05-26 10:08:58 +02:00
Carlton Gibson a173202dd4 [3.2.x] Fixed #32740 -- Caught possible exception when initializing colorama.
Backport of c2e6047c72 from main
2021-05-19 11:16:13 +02:00
Mariusz Felisiak 41e2aa7eb2 [3.2.x] Fixed #32747 -- Prevented initialization of unused caches.
Thanks Alexander Ebral for the report.

Regression in 98e05ccde4.

Backport of 958cdf65ae from main
2021-05-18 20:23:26 +02:00
Rust Saiargaliev 349bb58b8a [3.2.x] Fixed #32733 -- Skipped system check for specifying type of auto-created primary keys on abstract models.
Regression in b5e12d490a.

Backport of a24fed399c from main
2021-05-18 13:20:55 +02:00
Slava Skvortsov ce78bc9808 [3.2.x] Fixed #32754 -- Made AdminSite.catch_all_view() respect SCRIPT_NAME.
Regression in ba31b01034.

Backport of f7691d4812 from main
2021-05-18 09:58:49 +02:00
Mariusz Felisiak 1037825eed [3.2.x] Added stub release notes for Django 3.2.4.
Backport of 820408d842 from main
2021-05-13 09:45:39 +02:00