4cfbeac954Accepting request 1245111 from devel:languages:python:django
factory
Ana Guerrero
2025-02-11 20:20:19 +00:00
a5b485aaa4- Update to 5.1.6 * Fixed a regression in Django 5.1.5 that caused validate_ipv6_address() and validate_ipv46_address() to crash when handling non-string values * Fixed a regression in Django 5.1 where password fields, despite being set to required=False, were still treated as required in forms derived from BaseUserCreationForm
devel
Markéta Machová2025-02-11 14:13:37 +00:00
3cf5681960Accepting request 1238033 from devel:languages:python:django
Ana Guerrero
2025-01-17 17:36:51 +00:00
b2d85302c5- Update to 5.1.5 (bsc#1235856) * CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation * Fixed a crash when applying migrations with references to the removed Meta.index_together optionMarkéta Machová2025-01-15 12:08:37 +00:00
ed596b7283Accepting request 1229315 from devel:languages:python:django
Ana Guerrero
2024-12-10 22:43:01 +00:00
cec361ba85- Update to 5.1.4 (bsc#1234231, CVE-2024-53908, bsc#1234232, CVE-2024-53907) * CVE-2024-53907: Potential denial-of-service in django.utils.html.strip_tags() * CVE-2024-53908: Potential SQL injection in HasKey(lhs, rhs) on Oracle * Fixed a crash in createsuperuser on Python 3.13+ caused by an unhandled OSError * Fixed a regression in Django 5.1 where relational fields were not updated * Fixed a bug in Django 5.1 where DomainNameValidator accepted any input value that contained a valid domain name, rather than only input values that were a valid domain name * Fixed a regression in Django 5.1 that prevented the use of DB-IP databases with GeoIP2 * Fixed a regression in Django 5.1 where non-ASCII fieldset names were not displayed when rendering admin fieldsetsMarkéta Machová2024-12-09 11:00:19 +00:00
f398fa39beAccepting request 1208607 from devel:languages:python:django
Ana Guerrero
2024-10-18 13:52:54 +00:00
828c0a3f1e- Update to 5.1.2 * Fixed a regression in Django 5.1 that caused a crash when using the PostgreSQL lookup trigram_similar on output fields from Concat * Fixed a regression in Django 5.1 that caused a crash of JSONObject() when using server-side binding with PostgreSQL 16+ * Fixed a regression in Django 5.1 that made selected items in multi-select widgets indistinguishable from non-selected items in the admin dark themeMarkéta Machová2024-10-17 10:32:45 +00:00
aa9f2197a0Accepting request 1198700 from devel:languages:python:django
Ana Guerrero
2024-09-05 13:46:17 +00:00
8d6af13dc7- Update to 5.1.1 (CVE-2024-45230, bsc#1229823, CVE-2024-45231, bsc#1229824) * Fixed a regression in Django 5.1 that caused a crash of Window() when passing an empty sequence to the order_by parameter, and a crash of Prefetch() for a sliced queryset without ordering * Fixed a regression in Django 5.1 where a new usable_password field was included in BaseUserCreationForm (and children). * Adjusted the deprecation warning stacklevel in Model.save() and Model.asave() to correctly point to the offending call site * Adjusted the deprecation warning stacklevel when using OS_OPEN_FLAGS in FileSystemStorage to correctly point to the offending call site * Adjusted the deprecation warning stacklevel in FieldCacheMixin.get_cache_name() to correctly point to the offending call site * Restored, following a regression in Django 5.1, the ability to override the timezone and role setting behavior used within the init_connection_state method of the PostgreSQL backend * Fixed a bug in Django 5.1 where variable lookup errors were logged when rendering admin fieldsetsMarkéta Machová2024-09-04 07:53:21 +00:00
9989555d48- Update to 5.1.1 * CVE-2024-45230: Potential denial-of-service vulnerability in django.utils.html.urlize() * CVE-2024-45231: Potential user email enumeration via response status on password reset * Fixed a regression in Django 5.1 that caused a crash of Window() when passing an empty sequence to the order_by parameter, and a crash of Prefetch() for a sliced queryset without ordering * Fixed a regression in Django 5.1 where a new usable_password field was included in BaseUserCreationForm (and children). A new AdminUserCreationForm including this field was added, isolating the feature to the admin where it was intended * Adjusted the deprecation warning stacklevel in Model.save() and Model.asave() to correctly point to the offending call site * Adjusted the deprecation warning stacklevel when using OS_OPEN_FLAGS in FileSystemStorage to correctly point to the offending call site * Adjusted the deprecation warning stacklevel in FieldCacheMixin.get_cache_name() to correctly point to the offending call site * Restored, following a regression in Django 5.1, the ability to override the timezone and role setting behavior used within the init_connection_state method of the PostgreSQL backend * Fixed a bug in Django 5.1 where variable lookup errors were logged when rendering admin fieldsetsAlberto Planas Dominguez2024-09-04 07:52:11 +00:00
7b2716d803Accepting request 1192955 from devel:languages:python:django
Dominique Leuenberger
2024-08-11 14:55:29 +00:00
1fe3b55357Accepting request 1192591 from devel:languages:python:django
Dominique Leuenberger
2024-08-09 14:15:06 +00:00
159aab95f6- Update to 5.1 * Supports Python >= 3.10. * Easier guardrails for authentication: the new and shiny LoginRequiredMiddleware, when added to MIDDLEWARE, enforces authentication for all views by default. * A more inclusive framework: Django 5.1 includes several accessibility enhancements, such as improved screen reader support in the admin interface, more semantic HTML elements, and better association of help text and labels with form fieldsets. * The second oldest ticket fixed in this release provides the long awaited querystring template tag, which greatly simplifies the handling of query strings when building URLs in templates. * For a detailed list of changes see https://docs.djangoproject.com/en/5.1/releases/5.1/ - Refreshed python-Django.keyringAlberto Planas Dominguez2024-08-09 14:04:24 +00:00
53691256c5Accepting request 1192060 from devel:languages:python:django
Dominique Leuenberger
2024-08-08 08:57:04 +00:00
56b3641859- Update to 5.0.8 * CVE-2024-41989: Memory exhaustion in django.utils.numberformat.floatformat() * CVE-2024-41990: Potential denial-of-service vulnerability in django.utils.html.urlize() * CVE-2024-41991: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget * CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list() * Added missing validation for UniqueConstraint(nulls_distinct=False) when using *expressions * Fixed a regression in Django 5.0 where ModelAdmin.action_checkbox could break the admin changelist HTML page when rendering a model instance with a __html__ method * Fixed a crash when creating a model with a Field.db_default and a Meta.constraints constraint composed of __endswith, __startswith, or __contains lookups * Fixed a regression in Django 5.0.7 that caused a crash in LocaleMiddleware when processing a language code over 500 characters * Fixed a bug in Django 5.0 that caused a system check crash when ModelAdmin.date_hierarchy was a GeneratedField with an output_field of DateField or DateTimeField * Fixed a bug in Django 5.0 which caused constraint validation to either crash or incorrectly raise validation errors for constraints referring to fields using Field.db_default * Fixed a crash in Django 5.0 when saving a model containing a FileField with a db_default setAlberto Planas Dominguez2024-08-07 06:25:06 +00:00
d8de200361Accepting request 1188243 from devel:languages:python:django
Ana Guerrero
2024-07-18 17:15:46 +00:00
5cd5359fe9- Add python3122.patch to fix tests with python 3.12.2 gh#django/django#17843 - Update to 4.2.10 (bsc#1219683, CVE-2024-24680): - Django 4.2.10 fixes a security issue with severity "moderate" in 4.2.9. CVE-2024-24680: Potential denial-of-service in intcomma template filter The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.Daniel Garcia2024-02-09 10:55:29 +00:00
8090c914d2Accepting request 1137119 from devel:languages:python:django
Dominique Leuenberger
2024-01-05 21:59:57 +00:00
c93b729a7dAccepting request 1137053 from home:alarrosa:branches:devel:languages:python:djangoAlberto Planas Dominguez2024-01-05 17:21:59 +00:00
d349f9a71eAccepting request 1136760 from home:aplanas:branches:devel:languages:python:djangoAlberto Planas Dominguez2024-01-04 10:14:17 +00:00
1ffd3b773fAccepting request 1130705 from devel:languages:python:django
Ana Guerrero
2023-12-05 16:00:57 +00:00
947b4638e3Accepting request 1130704 from home:aplanas:branches:devel:languages:python:djangoAlberto Planas Dominguez2023-12-04 10:38:51 +00:00
84f1c6c6dbAccepting request 1129130 from devel:languages:python:django
Ana Guerrero
2023-11-27 21:42:03 +00:00
f5462fb0baAccepting request 1129117 from home:dirkmueller:branches:openSUSE:Factory:Rings:1-MinimalXMarkéta Machová2023-11-27 12:51:15 +00:00
3f20e7cd62Accepting request 1121683 from devel:languages:python:django
Ana Guerrero
2023-11-02 19:20:48 +00:00
511a9bdfa8Accepting request 1121555 from home:aplanas:branches:devel:languages:python:djangoMarkéta Machová2023-11-01 19:30:35 +00:00
6550ed5d57Accepting request 1117946 from devel:languages:python:django
Ana Guerrero
2023-10-16 20:32:49 +00:00
7fe88e78a2- Update to 4.2.6 (bsc#1215978, CVE-2023-43665) * CVE-2023-43665: Denial-of-service possibility in django.utils.text.Truncator The input processed by Truncator, when operating in HTML mode, has been limited to the first five million characters in order to avoid potential performance and memory issues. * Fixed a regression in Django 4.2.5 where overriding the deprecated DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings in tests caused the main STORAGES to mutate (#34821). * Fixed a regression in Django 4.2 that caused unnecessary casting of string based fields (CharField, EmailField, TextField, CICharField, CIEmailField, and CITextField) used with the __isnull lookup on PostgreSQL. As a consequence, indexes using an __isnull expression or condition created before Django 4.2 wouldn’t be used by the query planner, leading to a performance regression (#34840).Daniel Garcia2023-10-16 08:50:29 +00:00
9f73690cc9Accepting request 1108900 from devel:languages:python:django
Ana Guerrero
2023-09-06 16:55:51 +00:00
b9976f23ddAccepting request 1108899 from home:aplanas:branches:devel:languages:python:djangoAlberto Planas Dominguez2023-09-04 14:23:01 +00:00
7a7aee7b73Accepting request 1101902 from devel:languages:python:django
Dominique Leuenberger
2023-08-03 15:27:12 +00:00
e8b7c32d59Accepting request 1101901 from home:aplanas:branches:devel:languages:python:djangoAlberto Planas Dominguez2023-08-02 07:50:24 +00:00
4124d4dd8fAccepting request 1099279 from devel:languages:python:django
Ana Guerrero
2023-07-24 16:11:42 +00:00
fe8cfebe06Accepting request 1099276 from home:mcalabkova:branches:devel:languages:python:djangoAlberto Planas Dominguez2023-07-18 13:27:33 +00:00
6a5fc44771Accepting request 1097911 from devel:languages:python:django
Ana Guerrero
2023-07-11 13:56:18 +00:00
8a22c0bac2Accepting request 1097909 from home:aplanas:branches:devel:languages:python:djangoAlberto Planas Dominguez2023-07-10 10:10:57 +00:00
d40f906110Accepting request 1092069 from devel:languages:python:django
Dominique Leuenberger
2023-06-12 13:24:15 +00:00
75163a6907Accepting request 1092045 from home:ecsos:pythonDirk Mueller2023-06-11 07:55:46 +00:00
82e6b245dbAccepting request 1091069 from devel:languages:python:django
Dominique Leuenberger
2023-06-07 21:06:13 +00:00
62fb97b70fAccepting request 1091039 from home:aplanas:branches:devel:languages:python:djangoMarkéta Machová2023-06-06 10:33:13 +00:00
d53deb8760Accepting request 1084540 from devel:languages:python:django
Dominique Leuenberger
2023-05-19 09:55:03 +00:00
6ae26379e9Accepting request 1084538 from home:aplanas:branches:devel:languages:python:djangoAlberto Planas Dominguez2023-05-04 07:11:45 +00:00
5ba37fec4dAccepting request 1078228 from devel:languages:python:django
Dominique Leuenberger
2023-04-11 11:50:42 +00:00
737dd2a5abAccepting request 1077655 from home:david.anes:branches:devel:languages:python:djangoAlberto Planas Dominguez2023-04-10 07:08:59 +00:00
4d2ff8a105Accepting request 1077208 from devel:languages:python:django
Dominique Leuenberger
2023-04-06 13:55:52 +00:00
3a4a71f932Accepting request 1077154 from home:david.anes:branches:devel:languages:python:djangoMatej Cepl2023-04-04 12:57:04 +00:00
a85e2071a7Accepting request 1065703 from devel:languages:python:django
Dominique Leuenberger
2023-02-14 15:44:34 +00:00
ce36eaf1afAccepting request 1065702 from home:aplanas:branches:devel:languages:python:djangoAlberto Planas Dominguez2023-02-14 10:19:37 +00:00
d80547ad32Accepting request 1062448 from devel:languages:python:django
Dominique Leuenberger
2023-02-02 17:07:34 +00:00
5b99a6375dAccepting request 1062447 from home:aplanas:branches:devel:languages:python:djangoAlberto Planas Dominguez2023-02-01 13:06:51 +00:00
4adadea24cAccepting request 1046464 from devel:languages:python:django
Dominique Leuenberger
2023-01-04 17:09:58 +00:00
d185374299Accepting request 1046292 from home:david.anes:branches:devel:languages:python:djangoMatej Cepl2023-01-03 10:05:02 +00:00
fd2c54f705Accepting request 1044061 from devel:languages:python:django
Dominique Leuenberger
2022-12-23 09:20:45 +00:00