1
0
mirror of https://github.com/django/django.git synced 2025-03-22 23:30:45 +00:00

6 Commits

Author SHA1 Message Date
Simon Charette
6943d61818 [5.1.x] Fixed CVE-2024-53908 -- Prevented SQL injections in direct HasKeyLookup usage on Oracle.
Thanks Seokchan Yoon for the report, and Mariusz Felisiak and Sarah
Boyce for the reviews.
2024-12-04 13:47:31 +01:00
Sarah Boyce
bbc74a7f7e [5.1.x] Fixed CVE-2024-53907 -- Mitigated potential DoS in strip_tags().
Thanks to jiangniao for the report, and Shai Berger and Natalia Bidart
for the reviews.
2024-12-04 13:47:21 +01:00
Adam Johnson
6e3e7353e0 [5.1.x] Fixed #35950 -- Restored refreshing of relations when fields deferred.
Thank you to Simon Charette and Sarah Boyce for the review.

Regression in 73df8b54a2fab53bec4c7573cda5ad8c869c2fd8.

Backport of 2f6b096b83c55317c7ceef2d8d5dc3bee33293dc from main.
2024-12-02 16:05:11 +01:00
Sarah Boyce
5f82a5e4c7 [5.1.x] Added stub release notes and release date for 5.1.4, 5.0.10, and 4.2.17.
Backport of 2544c1585473c1e82dab1274b52052744f97ca72 from main.
2024-11-27 15:42:58 +01:00
Tommy Allen
4b262408aa [5.1.x] Fixed #35942 -- Fixed createsuperuser crash on Python 3.13+ when username is unavailable.
Thanks Mariusz Felisiak and Jacob Tyler Walls for reviews.

Backport of c635decb00ac957daf81c08541cdc9cf46f6d86d from main.
2024-11-26 17:16:30 -03:00
Mariusz Felisiak
a0d8fad23e [5.1.x] Added stub release notes for 5.1.4.
Backport of 2d41e40ddfe90de4bc1ceeba38bbe1f6eb4ce7ce from main
2024-11-05 06:32:04 +01:00