Commit Graph

12 Commits

Author SHA1 Message Date
Dan Palmer 580bd64c04 [3.1.x] Fixed CVE-2020-13254 -- Enforced cache key validation in memcached backends. 2020-06-03 09:31:28 +02:00
Jon Dufresne 49d7cc19e3 [3.1.x] Fixed CVE-2020-13596 -- Fixed potential XSS in admin ForeignKeyRawIdWidget. 2020-06-03 09:30:41 +02:00
Carlton Gibson 0186b43073 [3.1.x] Added release date for 2.2.13 and 3.0.7.
Backport of 81dc710571 from master
2020-06-03 09:14:30 +02:00
Carlton Gibson f9a1da1c06 [3.1.x] Refs #31485 -- Added release notes for backport of jQuery upgrade to 3.5.1.
Backport of 0daddf093f from master
2020-06-02 14:34:56 +02:00
Carlton Gibson 98fada7244 [3.1.x] Fixed #31570 -- Corrected translation loading for apps providing territorial language variants with different plural equations.
Regression in e3e48b0012.

Thanks to Shai Berger for report, reproduce and suggested fix.

Backport of dd1ca50b09 from master
2020-06-01 09:27:02 +02:00
Carlton Gibson 36d5646aff [3.1.x] Updated expected release dates for 3.0.7 and 2.2.13.
Backport of 9d55ae00d3 from master
2020-05-27 10:20:37 +02:00
Mariusz Felisiak d5231719e0 [3.1.x] Refs #31607 -- Added release notes for a125da6a7c.
Backport of 8328811f04 from master
2020-05-20 09:19:08 +02:00
Mariusz Felisiak b46b0f80e8 [3.1.x] Fixed #31584 -- Fixed crash when chaining values()/values_list() after Exists() annotation and aggregation on Oracle.
Oracle requires the EXISTS expression to be wrapped in a CASE WHEN in
the GROUP BY clause.

Regression in efa1908f66.
Backport of 3a941230c8 from master
2020-05-14 15:10:28 +02:00
Simon Charette 3913acdb29 [3.1.x] Fixed #31568 -- Fixed alias reference when aggregating over multiple subqueries.
691def10a0 made all Subquery() instances
equal to each other which broke aggregation subquery pushdown which
relied on object equality to determine which alias it should select.

Subquery.__eq__() will be fixed in an another commit but
Query.rewrite_cols() should haved used object identity from the start.

Refs #30727, #30188.

Thanks Makina Corpus for the report.

Backport of adfbf653dc from master
2020-05-14 10:26:05 +02:00
Simon Charette 8cb87a3f7c [3.1.x] Fixed #31566 -- Fixed aliases crash when chaining values()/values_list() after annotate() with aggregations and subqueries.
Subquery annotation references must be resolved if they are excluded
from the GROUP BY clause by a following .values() call.

Regression in fb3f034f1c.

Thanks Makina Corpus for the report.

Backport of 42c08ee465 from master
2020-05-14 08:39:21 +02:00
Mariusz Felisiak b73e66e758
Fixed #31538 -- Fixed Meta.ordering validation lookups that are not transforms.
Regression in 440505cb2c.

Thanks Simon Meers for the report.
2020-05-05 09:08:29 +02:00
Mariusz Felisiak 8e8ff38cb8 Added stub release notes for 3.0.7. 2020-05-04 07:38:35 +02:00