Mariusz Felisiak
d16133568e
[3.2.x] Fixed CVE-2022-23833 -- Fixed DoS possiblity in file uploads.
...
Thanks Alan Ryan for the report and initial patch.
Backport of fc18f36c4a
from main.
2022-02-01 07:54:17 +01:00
Markus Holtermann
1a1e8278c4
[3.2.x] Fixed CVE-2022-22818 -- Fixed possible XSS via {% debug %} template tag.
...
Thanks Keryn Knight for the report.
Backport of 394517f078
from main.
Co-authored-by: Adam Johnson <me@adamj.eu>
2022-02-01 07:53:21 +01:00
Mariusz Felisiak
a7e89fe776
[3.2.x] Added stub release notes for 3.2.12 and 2.2.27.
...
Backport of eeca934238
from main.
2022-01-25 07:27:35 +01:00
Carlton Gibson
027f4c4ceb
[3.2.x] Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive.
...
Backport of 63869ab1f1
from main
2022-01-04 11:31:13 +01:00
Florian Apolloner
8d2f7cff76
[3.2.x] Fixed CVE-2021-45452 -- Fixed potential path traversal in storage subsystem.
...
Thanks to Dennis Brinkrolf for the report.
2022-01-04 10:19:49 +01:00
Florian Apolloner
c7fe895bca
[3.2.x] Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort template filter.
...
Thanks to Dennis Brinkrolf for the report.
Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04 10:19:49 +01:00
Florian Apolloner
a8b32fe13b
[3.2.x] Fixed CVE-2021-45115 -- Prevented DoS vector in UserAttributeSimilarityValidator.
...
Thanks Chris Bailey for the report.
Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04 10:19:49 +01:00
Carlton Gibson
b0aa0709a5
[3.2.x] Added stub release notes for 3.2.11, and 2.2.26 releases.
...
Backport of b13d920b7b
from main.
2021-12-28 10:09:49 +01:00
Mariusz Felisiak
ae242235db
[3.2.x] Refs #33365 , Refs #30530 -- Doc'd re_path() behavior change in Django 2.2.25, 3.1.14, and 3.2.10.
...
Follow up to d4dcd5b9dd
.
Backport of 5de12a369a
from main
2021-12-15 18:55:01 +01:00
Mariusz Felisiak
ecd2793897
[3.2.x] Added CVE-2021-44420 to security archive.
...
Backport of 8747052411
from main
2021-12-07 08:54:16 +01:00
Florian Apolloner
333c656030
[3.2.x] Fixed #30530 , CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.
...
Thanks Sjoerd Job Postmus and TengMA(@te3t123) for reports.
Backport of d4dcd5b9dd
from main.
2021-12-07 06:32:24 +01:00
Mariusz Felisiak
cb724ef6c0
[3.2.x] Fixed #33333 -- Fixed setUpTestData() crash with models.BinaryField on PostgreSQL.
...
This makes models.BinaryField pickleable on PostgreSQL.
Regression in 3cf80d3fcf
.
Thanks Adam Zimmerman for the report.
Backport of 2c7846d992
from main.
2021-12-03 12:01:28 +01:00
Mariusz Felisiak
0cf2d48ba8
[3.2.x] Added requirements.txt to files ignored by Sphinx builds.
2021-11-30 11:58:43 +01:00
Mariusz Felisiak
487a2da02e
[3.2.x] Added stub release notes and release date for 3.2.10, 3.1.14 and 2.2.25.
...
Backport of ae4077e13e
from main
2021-11-30 11:26:39 +01:00
Mariusz Felisiak
742d6bc8db
[3.2.x] Corrected signatures of QuerySet's methods.
...
Backport of a17becf4c7
from main
2021-11-23 07:05:32 +01:00
Mariusz Felisiak
99532fdadf
[3.2.x] Corrected isort example in coding style docs.
...
Follow up to e74b3d724e
.
Backport of 8b020f2e64
from main
2021-11-22 12:35:12 +01:00
Paolo Melchiorre
31539a63f2
[3.2.x] Corrected "pip install" call in coding style docs.
...
Backport of dd528cb2ce
from main
2021-11-22 09:57:44 +01:00
Mariusz Felisiak
04e66e245d
[3.2.x] Fixed crash building HTML docs since Sphinx 4.3.
...
See dd2ff3e911
.
Backport of f0480ddd2d
from main
2021-11-18 11:23:02 +01:00
Mariusz Felisiak
dfa1145a22
[3.2.x] Corrected multiply defined labels in docs.
...
Backport of 60503cc747
from main
2021-11-04 10:46:55 +01:00
Carlton Gibson
9d171643d4
[3.2.x] Refs #33247 -- Corrected configuration for Read The Docs.
...
This pins Sphinx version, because the default Sphinx version used by
RTD is not compatible with Python 3.8+.
This also, sets Python 3.8 for RTD builds which is compatible with all
current versions of Django.
Thanks to Mariusz Felisiak for the suggestion.
Backport of 447b6c866f
from main.
2021-11-03 18:55:32 +01:00
Adam Johnson
bc691d555e
[3.2.x] Corrected module reference in contributing tutorial.
...
Backport of 9f3bd9dfc4
from main
2021-11-03 07:48:14 +01:00
Brad
3357ad2de2
[3.2.x] Fixed typo in docs/topics/logging.txt.
...
Backport of c7152cb58e
from main
2021-11-03 07:42:29 +01:00
Mariusz Felisiak
34e5e61479
[3.2.x] Added stub release notes for Django 3.2.10.
...
Backport of d811fa1d10
from main
2021-11-01 10:42:47 +01:00
Mariusz Felisiak
e299cc2d2c
[3.2.x] Added release date for 3.2.9.
...
Backport of 7ec603ba25
from main
2021-11-01 10:19:37 +01:00
Vikash Singh
947d2707c6
[3.2.x] Added Google Cloud Spanner to list of third-party DB backends.
...
Backport of 125f9afc2c
from main
2021-11-01 10:10:54 +01:00
Carlton Gibson
128179c0f8
[3.2.x] Refs #33182 -- Adjusted custom admin theming example to use correct template block.
...
Backport of a754b82dac
from main
2021-10-27 12:18:04 +02:00
Hannes Ljungberg
f5802a21c4
[3.2.x] Fixed #33194 -- Fixed migrations when altering a field with functional indexes on SQLite.
...
This adjusts Expressions.rename_table_references() to only update alias
when needed.
Regression in 83fcfc9ec8
.
Co-authored-by: Simon Charette <charettes@users.noreply.github.com>
Backport of 86971c4090
from main.
2021-10-18 09:37:46 +02:00
Nick Frazier
fdc1c6435c
[3.2.x] Fixed #33198 -- Corrected BinaryField.max_length docs.
...
Backport of 0d4e575c96
from main
2021-10-18 08:24:36 +02:00
Mariusz Felisiak
dbcd81841f
[3.2.x] Refs #32074 -- Removed usage of deprecated asyncore and smtpd modules.
...
asyncore and smtpd modules were deprecated in Python 3.10.
Backport of 569a33579c
from main.
2021-10-15 10:04:06 +02:00
Mariusz Felisiak
1128291650
[3.2.x] Added 'formatter' to spelling wordlist.
...
Backport of e43a131887
from main
2021-10-12 15:17:11 +02:00
Mariusz Felisiak
82fee0446d
[3.2.x] Refs #32074 -- Doc'd Python 3.10 compatibility in Django 3.2.x.
...
Backport of 604df4e0ad
from main.
2021-10-05 13:33:15 +02:00
Carlton Gibson
329311ecbd
[3.2.x] Added stub release notes for Django 3.2.9.
...
Backport of c113f7fb0d
from main
2021-10-05 09:40:24 +02:00
Carlton Gibson
65367b0500
[3.2.x] Added release date for 3.2.7.
...
Backport of c5776bfca9
from main
2021-10-05 09:09:17 +02:00
Sarah Abderemane
51e4dbfeb2
[3.2.x] Refs #27694 -- Doc'd lookups that can be chained with HStoreField key transforms.
...
Backport of 1953dd02b6
from main
2021-10-04 07:44:42 +02:00
Mariusz Felisiak
031ffc5c84
[3.2.x] Corrected field and model check messages in docs.
...
Follow up to 72d04e0385
.
Backport of 93f3b7a0ba
from main
2021-09-28 10:58:18 +02:00
Claude Paroz
7607fe922f
[3.2.x] Removed obsolete GEOS 3.5 requirement note.
...
Follow up to ea87a85fad
.
Backport of 8036b53de6
from main
2021-09-24 18:53:36 +02:00
Carlton Gibson
6760f4fa25
[3.2.x] Fixed #33083 -- Fixed selecting all items in the admin changelist when actions are both top and bottom.
...
Thanks Benjamin Locher for the report.
Regression in 30e59705fc
.
Backport of b0ed619303
from main
2021-09-21 19:59:41 +02:00
Mariusz Felisiak
e235c7815a
[3.2.x] Fixed broken links and redirects in docs.
...
Backport of 1d16dbc745
from main
2021-09-21 09:29:21 +02:00
Mariusz Felisiak
51e76c922f
[3.2.x] Used :rfc: role in docs/topics/conditional-view-processing.txt.
...
Backport of f8bab4e0dc
from main
2021-09-21 09:29:18 +02:00
Ken Whitesell
d4a587a5fa
[3.2.x] Fixed #33077 -- Fixed links to related models for admin's readonly fields in custom admin site.
...
Backport of 0a9aa02e6f
from main
2021-09-18 20:10:06 +02:00
Steven Maude
561a1c0905
[3.2.x] Fixed typo in docs/intro/reusable-apps.txt.
...
Backport of 475cffd1d6
from main
2021-09-17 20:20:31 +02:00
Mariusz Felisiak
454ee4d3b8
[3.2.x] Corrected outputs and made cosmetic edits in GeoDjango tutorial.
...
Backport of b5bf026813
from main
2021-09-17 09:15:28 +02:00
David Smith
b51e0a37cf
[3.2.x] Doc'd Jinja2 form renderer.
...
Backport of 7132d17de1
from main
2021-09-16 11:57:24 +02:00
David Sanders
a7be74d017
[3.2.x] Clarified type of Window()'s partition_by and order_by arguments.
...
Backport of ecf76cc1fb
from main
2021-09-10 12:27:55 +02:00
Adam Johnson
54684a3ec0
[3.2.x] Refs #31055 -- Doc'd 'databases' argument of check functions.
...
Backport of c8d3cbdba8
from main
2021-09-10 11:48:20 +02:00
Jacob Walls
1f86ff31b1
[3.2.x] Fixed typo in docs/topics/i18n/formatting.txt.
...
Backport of e75a3a770e
from main
2021-09-04 20:33:15 +02:00
Mariusz Felisiak
707239eabf
[3.2.x] Added stub release notes for Django 3.2.8.
...
Backport of af10e97531
from main
2021-09-01 09:51:50 +02:00
Mariusz Felisiak
4b80a40272
[3.2.x] Added release date for 3.2.7.
...
Backport of f3a0dc5b2a
from main
2021-09-01 07:42:25 +02:00
Jan Szoja
4e55806720
[3.2.x] Refs #25264 -- Doc's that not all default options are supported by every management command.
...
Backport of 3cca5fdd3e
from main
2021-08-31 13:34:50 +02:00
Carlton Gibson
fe3a854e1d
[3.2.x] Fixed #32992 -- Restored offset extraction for fixed offset timezones.
...
Regression in 10d1261984
.
Backport of cbba49971b
from main
2021-08-30 10:46:19 +02:00