Mariusz Felisiak 379b37171b [4.2.x] Added CVE-2023-23969 to security archive. ... Backport of 36e3eef7d5 from main		2023-02-01 12:10:03 +01:00
..
0.95.txt	Added missing backticks to function names.	2022-03-17 11:10:03 +01:00
0.96.txt	Refs #32720 -- Used :commit: and :source: role in old release notes.	2021-05-17 07:36:57 +02:00
1.0-porting-guide.txt	Changed some words to use inline markup.	2022-03-10 10:18:31 +01:00
1.0.1.txt
1.0.2.txt
1.0.txt	Removed hyphen from pre-/re- prefixes.	2022-04-28 10:44:14 +02:00
1.1.2.txt
1.1.3.txt	Removed hyphen from pre-/re- prefixes.	2022-04-28 10:44:14 +02:00
1.1.4.txt
1.1.txt	Fixed 32956 -- Lowercased spelling of "web" and "web framework" where appropriate.	2021-07-29 06:24:12 +02:00
1.2.1.txt
1.2.2.txt
1.2.3.txt	Refs #32720 -- Used :commit: and :source: role in old release notes.	2021-05-17 07:36:57 +02:00
1.2.4.txt	Removed hyphen from pre-/re- prefixes.	2022-04-28 10:44:14 +02:00
1.2.5.txt	Refs #32720 -- Used :commit: and :source: role in old release notes.	2021-05-17 07:36:57 +02:00
1.2.6.txt
1.2.7.txt
1.2.txt	Corrected multiply defined labels in docs.	2021-11-04 10:46:01 +01:00
1.3.1.txt
1.3.2.txt
1.3.3.txt
1.3.4.txt	Added backticks to code literals in various docs.	2022-04-28 10:44:14 +02:00
1.3.5.txt
1.3.6.txt	Fixed 32956 -- Lowercased spelling of "web" and "web framework" where appropriate.	2021-07-29 06:24:12 +02:00
1.3.7.txt
1.3.txt	Refs #32956 -- Changed docs to treat the acronym HTTP phonetically.	2021-10-18 21:00:28 +02:00
1.4.1.txt
1.4.2.txt	Added backticks to code literals in various docs.	2022-04-28 10:44:14 +02:00
1.4.3.txt
1.4.4.txt	Fixed 32956 -- Lowercased spelling of "web" and "web framework" where appropriate.	2021-07-29 06:24:12 +02:00
1.4.5.txt
1.4.6.txt
1.4.7.txt
1.4.8.txt
1.4.9.txt
1.4.10.txt
1.4.11.txt
1.4.12.txt
1.4.13.txt
1.4.14.txt
1.4.15.txt
1.4.16.txt
1.4.17.txt
1.4.18.txt
1.4.19.txt
1.4.20.txt
1.4.21.txt
1.4.22.txt
1.4.txt	Removed obsolete references to pysqlite.	2022-11-04 08:03:06 +01:00
1.5.1.txt	Added documentation extlink for bugs.python.org.	2021-02-17 14:24:42 +01:00
1.5.2.txt
1.5.3.txt	Changed docs and a code comment to use gender-neutral pronouns.	2020-11-13 22:26:30 +01:00
1.5.4.txt
1.5.5.txt
1.5.6.txt
1.5.7.txt
1.5.8.txt
1.5.9.txt
1.5.10.txt
1.5.11.txt
1.5.12.txt
1.5.txt	Changed "ie." to "i.e." in docs.	2022-04-28 10:37:06 +02:00
1.6.1.txt	Changed some words to use inline markup.	2022-03-10 10:18:31 +01:00
1.6.2.txt
1.6.3.txt
1.6.4.txt
1.6.5.txt
1.6.6.txt
1.6.7.txt
1.6.8.txt
1.6.9.txt
1.6.10.txt
1.6.11.txt	Added documentation extlink for bugs.python.org.	2021-02-17 14:24:42 +01:00
1.6.txt	Refs #33990 -- Renamed TransactionTestCase.assertQuerysetEqual() to assertQuerySetEqual().	2022-10-08 08:07:38 +02:00
1.7.1.txt
1.7.2.txt
1.7.3.txt
1.7.4.txt
1.7.5.txt
1.7.6.txt
1.7.7.txt	Added documentation extlink for bugs.python.org.	2021-02-17 14:24:42 +01:00
1.7.8.txt
1.7.9.txt
1.7.10.txt
1.7.11.txt
1.7.txt	Added missing backticks to function names.	2022-03-17 11:10:03 +01:00
1.8.1.txt
1.8.2.txt
1.8.3.txt
1.8.4.txt
1.8.5.txt
1.8.6.txt
1.8.7.txt
1.8.8.txt	Refs #32720 -- Updated various links in docs to avoid redirects and use HTTPS.	2021-05-17 09:46:09 +02:00
1.8.9.txt
1.8.10.txt
1.8.11.txt
1.8.12.txt
1.8.13.txt
1.8.14.txt
1.8.15.txt
1.8.16.txt
1.8.17.txt
1.8.18.txt
1.8.19.txt
1.8.txt	Fixed #32964 -- Corrected 'setup'/'set up' usage in docs.	2021-08-17 12:18:07 +02:00
1.9.1.txt	Changed some words to use inline markup.	2022-03-10 10:18:31 +01:00
1.9.2.txt
1.9.3.txt
1.9.4.txt
1.9.5.txt
1.9.6.txt
1.9.7.txt
1.9.8.txt
1.9.9.txt
1.9.10.txt
1.9.11.txt
1.9.12.txt
1.9.13.txt
1.9.txt	Fixed docs build with sphinxcontrib-spelling 7.5.0+.	2022-05-31 11:17:01 +02:00
1.10.1.txt
1.10.2.txt
1.10.3.txt
1.10.4.txt
1.10.5.txt
1.10.6.txt
1.10.7.txt
1.10.8.txt
1.10.txt	Updated various links to HTTPS and new locations.	2022-12-06 05:59:43 +01:00
1.11.1.txt
1.11.2.txt
1.11.3.txt
1.11.4.txt
1.11.5.txt
1.11.6.txt
1.11.7.txt
1.11.8.txt
1.11.9.txt
1.11.10.txt
1.11.11.txt
1.11.12.txt
1.11.13.txt
1.11.14.txt
1.11.15.txt
1.11.16.txt
1.11.17.txt
1.11.18.txt
1.11.19.txt
1.11.20.txt
1.11.21.txt
1.11.22.txt
1.11.23.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
1.11.24.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
1.11.25.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
1.11.26.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
1.11.27.txt
1.11.28.txt
1.11.29.txt
1.11.txt	Fixed #33308 -- Added support for psycopg version 3.	2022-12-15 06:17:57 +01:00
2.0.1.txt
2.0.2.txt
2.0.3.txt
2.0.4.txt
2.0.5.txt
2.0.6.txt
2.0.7.txt
2.0.8.txt
2.0.9.txt
2.0.10.txt
2.0.11.txt
2.0.12.txt
2.0.13.txt
2.0.txt	Updated Oracle docs links to Oracle 21c.	2022-03-29 09:41:57 +02:00
2.1.1.txt
2.1.2.txt
2.1.3.txt
2.1.4.txt
2.1.5.txt
2.1.6.txt
2.1.7.txt
2.1.8.txt
2.1.9.txt
2.1.10.txt
2.1.11.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
2.1.12.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
2.1.13.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
2.1.14.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
2.1.15.txt
2.1.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
2.2.1.txt
2.2.2.txt
2.2.3.txt
2.2.4.txt	Fixed "nulls characters" typo in docs.	2023-01-16 07:54:00 +01:00
2.2.5.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
2.2.6.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
2.2.7.txt	Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.	2021-01-14 17:50:04 +01:00
2.2.8.txt
2.2.9.txt
2.2.10.txt
2.2.11.txt
2.2.12.txt
2.2.13.txt
2.2.14.txt
2.2.15.txt
2.2.16.txt
2.2.17.txt	Set release date for 3.1.3, 3.0.11, and 2.2.17.	2020-11-02 08:35:24 +01:00
2.2.18.txt	Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().	2021-02-01 09:07:36 +01:00
2.2.19.txt	Refs CVE-2021-23336 -- Updated tests and release notes for affected versions.	2021-02-19 09:03:06 +01:00
2.2.20.txt	Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files.	2021-04-06 08:15:17 +02:00
2.2.21.txt	Refs #32718 -- Corrected CVE-2021-31542 release notes.	2021-05-12 10:42:01 +02:00
2.2.22.txt	Fixed #32713, Fixed CVE-2021-32052 -- Prevented newlines and tabs from being accepted in URLValidator on Python 3.9.5+.	2021-05-06 08:45:23 +02:00
2.2.23.txt	Fixed #32718 -- Relaxed file name validation in FileField.	2021-05-13 08:53:44 +02:00
2.2.24.txt	Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.	2021-06-02 10:58:39 +02:00
2.2.25.txt	Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.	2021-12-07 06:28:08 +01:00
2.2.26.txt	Corrected merge error in release notes.	2022-01-04 10:50:23 +01:00
2.2.27.txt	Fixed typo in release notes.	2022-02-02 07:17:57 +01:00
2.2.28.txt	Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.	2022-04-11 08:59:58 +02:00
2.2.txt	Fixed #32964 -- Corrected 'setup'/'set up' usage in docs.	2021-08-17 12:18:07 +02:00
3.0.1.txt
3.0.2.txt
3.0.3.txt
3.0.4.txt
3.0.5.txt
3.0.6.txt
3.0.7.txt
3.0.8.txt
3.0.9.txt
3.0.10.txt
3.0.11.txt	Set release date for 3.1.3, 3.0.11, and 2.2.17.	2020-11-02 08:35:24 +01:00
3.0.12.txt	Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().	2021-02-01 09:07:36 +01:00
3.0.13.txt	Refs CVE-2021-23336 -- Updated tests and release notes for affected versions.	2021-02-19 09:03:06 +01:00
3.0.14.txt	Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files.	2021-04-06 08:15:17 +02:00
3.0.txt	Refs #32956 -- Changed "afterwards" to "afterward" in docs and comments.	2021-07-27 10:41:51 +02:00
3.1.1.txt	Removed hyphen from pre-/re- prefixes.	2022-04-28 10:44:14 +02:00
3.1.2.txt
3.1.3.txt	Set release date for 3.1.3, 3.0.11, and 2.2.17.	2020-11-02 08:35:24 +01:00
3.1.4.txt	Added release date for 3.1.4.	2020-12-01 06:24:16 +01:00
3.1.5.txt	Added release date for 3.1.5.	2021-01-04 08:31:51 +01:00
3.1.6.txt	Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().	2021-02-01 09:07:36 +01:00
3.1.7.txt	Refs CVE-2021-23336 -- Updated tests and release notes for affected versions.	2021-02-19 09:03:06 +01:00
3.1.8.txt	Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files.	2021-04-06 08:15:17 +02:00
3.1.9.txt	Refs #32718 -- Corrected CVE-2021-31542 release notes.	2021-05-12 10:42:01 +02:00
3.1.10.txt	Fixed #32713, Fixed CVE-2021-32052 -- Prevented newlines and tabs from being accepted in URLValidator on Python 3.9.5+.	2021-05-06 08:45:23 +02:00
3.1.11.txt	Fixed #32718 -- Relaxed file name validation in FileField.	2021-05-13 08:53:44 +02:00
3.1.12.txt	Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.	2021-06-02 10:58:39 +02:00
3.1.13.txt	Fixed typo in docs/releases/3.1.13.txt.	2021-07-16 20:30:21 +02:00
3.1.14.txt	Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.	2021-12-07 06:28:08 +01:00
3.1.txt	Fixed #32348, Refs #29087 -- Corrected tutorial for updated deleting inlines UI.	2021-01-27 08:44:36 +01:00
3.2.1.txt	Fixed typo in docs/releases/3.2.1.txt.	2022-09-19 05:19:01 +02:00
3.2.2.txt	Fixed #32713, Fixed CVE-2021-32052 -- Prevented newlines and tabs from being accepted in URLValidator on Python 3.9.5+.	2021-05-06 08:45:23 +02:00
3.2.3.txt	Fixed #32718 -- Relaxed file name validation in FileField.	2021-05-13 08:53:44 +02:00
3.2.4.txt	Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.	2021-06-02 10:58:39 +02:00
3.2.5.txt	Forwardported release notes for CVE-2021-35042.	2021-07-01 09:42:54 +02:00
3.2.6.txt	Confirmed release date for Django 3.2.6.	2021-08-02 06:55:40 +02:00
3.2.7.txt	Added release date for 3.2.7.	2021-09-01 07:40:01 +02:00
3.2.8.txt	Added release date for 3.2.7.	2021-10-05 09:07:26 +02:00
3.2.9.txt	Added release date for 3.2.9.	2021-11-01 10:18:49 +01:00
3.2.10.txt	Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.	2021-12-07 06:28:08 +01:00
3.2.11.txt	Corrected merge error in release notes.	2022-01-04 10:50:23 +01:00
3.2.12.txt	Fixed typo in release notes.	2022-02-02 07:17:57 +01:00
3.2.13.txt	Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.	2022-04-11 08:59:58 +02:00
3.2.14.txt	Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against SQL injection.	2022-07-04 08:13:41 +02:00
3.2.15.txt	Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.	2022-08-03 08:46:31 +02:00
3.2.16.txt	Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.	2022-10-04 09:10:04 +02:00
3.2.17.txt	[4.2.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.	2023-02-01 09:45:07 +01:00
3.2.txt	Refs #33990 -- Renamed TransactionTestCase.assertQuerysetEqual() to assertQuerySetEqual().	2022-10-08 08:07:38 +02:00
4.0.1.txt	Refs #33990 -- Renamed SimpleTestCase.assertFormsetError() to assertFormSetError().	2022-10-07 11:22:16 +02:00
4.0.2.txt	Fixed typo in release notes.	2022-02-02 07:17:57 +01:00
4.0.3.txt	Updated release date for version 4.0.3.	2022-03-01 09:32:18 +01:00
4.0.4.txt	Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.	2022-04-11 08:59:58 +02:00
4.0.5.txt	Updated release date for Django 4.0.5.	2022-06-01 12:25:33 +02:00
4.0.6.txt	Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against SQL injection.	2022-07-04 08:13:41 +02:00
4.0.7.txt	Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.	2022-08-03 08:46:31 +02:00
4.0.8.txt	Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.	2022-10-04 09:10:04 +02:00
4.0.9.txt	[4.2.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.	2023-02-01 09:45:07 +01:00
4.0.txt	Fixed #33789 -- Doc'd changes in quoting table/column names on Oracle in Django 4.0.	2022-06-21 09:09:41 +02:00
4.1.1.txt	Added release date for 4.1.1.	2022-09-05 05:21:23 +02:00
4.1.2.txt	Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.	2022-10-04 09:10:04 +02:00
4.1.3.txt	Added release date for 4.1.3.	2022-11-01 06:54:19 +01:00
4.1.4.txt	Added release date for 4.1.4.	2022-12-06 09:56:43 +01:00
4.1.5.txt	Added release date for 4.1.5.	2023-01-02 08:10:59 +01:00
4.1.6.txt	[4.2.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.	2023-02-01 09:45:07 +01:00
4.1.txt	Refs #33397, Refs #34160 -- Added release note for resolving output_field changes.	2022-11-30 08:22:10 +01:00
4.2.txt	[4.2.x] Fixed typo in docs/releases/4.2.txt.	2023-01-17 19:28:19 +01:00
index.txt	[4.2.x] Adjusted release notes for 4.1.6, 4.0.9, and 3.2.17.	2023-01-25 12:26:40 +01:00
security.txt	[4.2.x] Added CVE-2023-23969 to security archive.	2023-02-01 12:10:03 +01:00