Revisions of python-Django
buildservice-autocommit
accepted
request 1208607
from
Markéta Machová (mcalabkova)
(revision 182)
baserev update by copy to link target
Markéta Machová (mcalabkova)
accepted
request 1208605
from
Markéta Machová (mcalabkova)
(revision 181)
- Update to 5.1.2 * Fixed a regression in Django 5.1 that caused a crash when using the PostgreSQL lookup trigram_similar on output fields from Concat * Fixed a regression in Django 5.1 that caused a crash of JSONObject() when using server-side binding with PostgreSQL 16+ * Fixed a regression in Django 5.1 that made selected items in multi-select widgets indistinguishable from non-selected items in the admin dark theme
buildservice-autocommit
accepted
request 1198700
from
Markéta Machová (mcalabkova)
(revision 180)
baserev update by copy to link target
Markéta Machová (mcalabkova)
committed
(revision 179)
- Update to 5.1.1 (bsc#1229823, bsc#1229824)
Markéta Machová (mcalabkova)
accepted
request 1198650
from
Markéta Machová (mcalabkova)
(revision 178)
- Update to 5.1.1 (CVE-2024-45230, bsc#1229823, CVE-2024-45231, bsc#1229824) * Fixed a regression in Django 5.1 that caused a crash of Window() when passing an empty sequence to the order_by parameter, and a crash of Prefetch() for a sliced queryset without ordering * Fixed a regression in Django 5.1 where a new usable_password field was included in BaseUserCreationForm (and children). * Adjusted the deprecation warning stacklevel in Model.save() and Model.asave() to correctly point to the offending call site * Adjusted the deprecation warning stacklevel when using OS_OPEN_FLAGS in FileSystemStorage to correctly point to the offending call site * Adjusted the deprecation warning stacklevel in FieldCacheMixin.get_cache_name() to correctly point to the offending call site * Restored, following a regression in Django 5.1, the ability to override the timezone and role setting behavior used within the init_connection_state method of the PostgreSQL backend * Fixed a bug in Django 5.1 where variable lookup errors were logged when rendering admin fieldsets
Alberto Planas Dominguez (aplanas)
accepted
request 1198652
from
Alberto Planas Dominguez (aplanas)
(revision 177)
- Update to 5.1.1 * CVE-2024-45230: Potential denial-of-service vulnerability in django.utils.html.urlize() * CVE-2024-45231: Potential user email enumeration via response status on password reset * Fixed a regression in Django 5.1 that caused a crash of Window() when passing an empty sequence to the order_by parameter, and a crash of Prefetch() for a sliced queryset without ordering * Fixed a regression in Django 5.1 where a new usable_password field was included in BaseUserCreationForm (and children). A new AdminUserCreationForm including this field was added, isolating the feature to the admin where it was intended * Adjusted the deprecation warning stacklevel in Model.save() and Model.asave() to correctly point to the offending call site * Adjusted the deprecation warning stacklevel when using OS_OPEN_FLAGS in FileSystemStorage to correctly point to the offending call site * Adjusted the deprecation warning stacklevel in FieldCacheMixin.get_cache_name() to correctly point to the offending call site * Restored, following a regression in Django 5.1, the ability to override the timezone and role setting behavior used within the init_connection_state method of the PostgreSQL backend * Fixed a bug in Django 5.1 where variable lookup errors were logged when rendering admin fieldsets
buildservice-autocommit
accepted
request 1192591
from
Markéta Machová (mcalabkova)
(revision 176)
baserev update by copy to link target
Alberto Planas Dominguez (aplanas)
accepted
request 1192949
from
Markéta Machová (mcalabkova)
(revision 175)
- Update to 5.1 * Supports Python >= 3.10. * Easier guardrails for authentication: the new and shiny LoginRequiredMiddleware, when added to MIDDLEWARE, enforces authentication for all views by default. * A more inclusive framework: Django 5.1 includes several accessibility enhancements, such as improved screen reader support in the admin interface, more semantic HTML elements, and better association of help text and labels with form fieldsets. * The second oldest ticket fixed in this release provides the long awaited querystring template tag, which greatly simplifies the handling of query strings when building URLs in templates. * For a detailed list of changes see https://docs.djangoproject.com/en/5.1/releases/5.1/ - Refreshed python-Django.keyring
Markéta Machová (mcalabkova)
committed
(revision 174)
add bugzilla entries for the CVEs
buildservice-autocommit
accepted
request 1192060
from
Alberto Planas Dominguez (aplanas)
(revision 173)
baserev update by copy to link target
Alberto Planas Dominguez (aplanas)
accepted
request 1192057
from
Alberto Planas Dominguez (aplanas)
(revision 172)
- Update to 5.0.8 * CVE-2024-41989: Memory exhaustion in django.utils.numberformat.floatformat() * CVE-2024-41990: Potential denial-of-service vulnerability in django.utils.html.urlize() * CVE-2024-41991: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget * CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list() * Added missing validation for UniqueConstraint(nulls_distinct=False) when using *expressions * Fixed a regression in Django 5.0 where ModelAdmin.action_checkbox could break the admin changelist HTML page when rendering a model instance with a __html__ method * Fixed a crash when creating a model with a Field.db_default and a Meta.constraints constraint composed of __endswith, __startswith, or __contains lookups * Fixed a regression in Django 5.0.7 that caused a crash in LocaleMiddleware when processing a language code over 500 characters * Fixed a bug in Django 5.0 that caused a system check crash when ModelAdmin.date_hierarchy was a GeneratedField with an output_field of DateField or DateTimeField * Fixed a bug in Django 5.0 which caused constraint validation to either crash or incorrectly raise validation errors for constraints referring to fields using Field.db_default * Fixed a crash in Django 5.0 when saving a model containing a FileField with a db_default set
buildservice-autocommit
accepted
request 1188243
from
Markéta Machová (mcalabkova)
(revision 171)
baserev update by copy to link target
Markéta Machová (mcalabkova)
accepted
request 1188242
from
Markéta Machová (mcalabkova)
(revision 170)
fix deps
Markéta Machová (mcalabkova)
accepted
request 1187821
from
Markéta Machová (mcalabkova)
(revision 169)
- This release also fixes several security issues: * bsc#1227590 (CVE-2024-38875) * bsc#1227593 (CVE-2024-39329) * bsc#1227594 (CVE-2024-39330) * bsc#1227595 (CVE-2024-39614)
buildservice-autocommit
accepted
request 1186497
from
Alberto Planas Dominguez (aplanas)
(revision 168)
baserev update by copy to link target
Alberto Planas Dominguez (aplanas)
accepted
request 1186489
from
Markéta Machová (mcalabkova)
(revision 167)
- Update to 5.0.7 * Supports Python >= 3.10. * Facet counts are now shown for applied filters in the admin changelist when toggled on via the UI. This behavior can be changed via the new ModelAdmin.show_facets attribute. * Django 5.0 introduces the concept of a field group, and field group templates. This simplifies rendering of the related elements of a Django form field such as its label, widget, help text, and errors. * The new Field.db_default parameter sets a database-computed default value. * The new GeneratedField allows creation of database generated columns. This field can be used on all supported database backends to create a field that is always computed from other fields. * More options for declaring field choices * Few backwards-incompatible changes in the database backend API, django.contrib.gis and django.contrib.sitemaps * Dropped support for MySQL < 8.0.11 * Using create_defaults__exact may now be required with QuerySet.update_or_create() * Migrating existing UUIDField on MariaDB 10.7+ - Drop no-longer-needed patches: * dirty-hack-remove-assert.patch * sanitize_address.patch
buildservice-autocommit
accepted
request 1172648
from
Alberto Planas Dominguez (aplanas)
(revision 166)
baserev update by copy to link target
Alberto Planas Dominguez (aplanas)
accepted
request 1172647
from
Alberto Planas Dominguez (aplanas)
(revision 165)
- Update to 4.2.13 + Django 4.2.13 fixes a packaging error in 4.2.12. - Update to 4.2.12 + Django 4.2.12 fixes a compatibility issue with Python 3.11.9+ and 3.12.3+. + Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme - Drop fix-safemimetext-set_payload.patch, already merged upstream
buildservice-autocommit
accepted
request 1168720
from
Daniel Garcia (dgarcia)
(revision 164)
baserev update by copy to link target
Daniel Garcia (dgarcia)
accepted
request 1168719
from
Daniel Garcia (dgarcia)
(revision 163)
- Add fix-safemimetext-set_payload.patch, to support python 3.11.9+ (gh#django/django@b231bcd19e57, bsc#1222880)
Displaying revisions 1 - 20 of 182