Revisions of python-Django
buildservice-autocommit
accepted
request 1154852
from
Alberto Planas Dominguez (aplanas)
(revision 162)
baserev update by copy to link target
Alberto Planas Dominguez (aplanas)
accepted
request 1154851
from
Alberto Planas Dominguez (aplanas)
(revision 161)
- Update to 4.2.11 (CVE-2024-27351, bsc#1220358) * CVE-2024-27351: Potential regular expression denial-of-service in django.utils.text.Truncator.words() * Fixed a regression in Django 4.2.10 where intcomma template filter could return a leading comma for string representation of floats - Remove python3122.patch, already upstream
buildservice-autocommit
accepted
request 1145400
from
Daniel Garcia (dgarcia)
(revision 160)
baserev update by copy to link target
Daniel Garcia (dgarcia)
committed
(revision 159)
- Fix python3122.patch
Daniel Garcia (dgarcia)
committed
(revision 158)
- Add python3122.patch to fix tests with python 3.12.2 gh#django/django#17843 - Update to 4.2.10 (bsc#1219683, CVE-2024-24680): - Django 4.2.10 fixes a security issue with severity "moderate" in 4.2.9. CVE-2024-24680: Potential denial-of-service in intcomma template filter The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.
buildservice-autocommit
accepted
request 1137119
from
Alberto Planas Dominguez (aplanas)
(revision 157)
baserev update by copy to link target
Alberto Planas Dominguez (aplanas)
accepted
request 1137053
from
Antonio Larrosa (alarrosa)
(revision 156)
Add bugzilla reference + CVE-2023-31047: Potential bypass of validation when uploading multiple files using one form field (bsc#1210866)
Alberto Planas Dominguez (aplanas)
accepted
request 1136760
from
Alberto Planas Dominguez (aplanas)
(revision 155)
- Update to 4.2.9: * Fixed a regression in Django 4.2.8 where admin fields on the same line could overflow the page and become non-interactive
buildservice-autocommit
accepted
request 1130705
from
Alberto Planas Dominguez (aplanas)
(revision 154)
baserev update by copy to link target
Alberto Planas Dominguez (aplanas)
accepted
request 1130704
from
Alberto Planas Dominguez (aplanas)
(revision 153)
- Update to 4.2.8 * Fixed a regression in Django 4.2 that caused makemigrations --check to stop displaying pending migrations * Fixed a regression in Django 4.2 that caused a crash of QuerySet.aggregate() with aggregates referencing other aggregates or window functions through conditional expressions * Fixed a regression in Django 4.2 that caused a crash when annotating a QuerySet with a Window expressions composed of a partition_by clause mixing field types and aggregation expressions * Fixed a regression in Django 4.2 where the admin’s change list page had misaligned pagination links and inputs when using list_editable * Fixed a regression in Django 4.2 where checkboxes in the admin would be centered on narrower screen widths * Fixed a regression in Django 4.2 that caused a crash of querysets with aggregations on MariaDB when the ONLY_FULL_GROUP_BY SQL mode was enabled * Fixed a regression in Django 4.2 where the admin’s read-only password widget and some help texts were incorrectly aligned at tablet widths * Fixed a regression in Django 4.2 that caused a migration crash on SQLite when altering unsupported Meta.db_table_comment
buildservice-autocommit
accepted
request 1129130
from
Markéta Machová (mcalabkova)
(revision 152)
baserev update by copy to link target
Markéta Machová (mcalabkova)
accepted
request 1129117
from
Dirk Mueller (dirkmueller)
(revision 151)
- add dirty-hack-remove-assert.patch from fedora to fix minor test failure with python 3.12 - Update to 4.2.5 (CVE-2023-41164) - Update minimal dependency versions. + Fixed a long standing bug in the __len lookup for ArrayField constraints on expressions and database functions. customization. read the egg-info and fail if they are not fulfilled. + New decorators for the admin site * CVE-2020-24584: Permission escalation in intermediate-level directories of the file * Fixed a data loss possibility in the select_for_update(). When using related fields * Fixed a regression in Django 3.1 that caused permission errors in CommonPasswordValidator * Added compatibility for cx_Oracle 8 * many other bugfixes - Update to 3.0.5 * Fixed a regression in Django 2.0 where combining Q objects with __in lookups with FileExistsError if concurrent saves try to create the same directory * Made admin’s RelatedFieldWidgetWrapper use the wrapped widget’s value_omitted_from_data() method (#27905) * Fixed ClearableFileInput’s “Clear” checkbox on model form fields where the model field has a default * Fixed RequestDataTooBig and TooManyFieldsSent exceptions crashing rather than * Fixed a crash on Oracle and PostgreSQL when subtracting DurationField or IntegerField from DateField * Fixed query expression date subtraction accuracy on PostgreSQL for differences * Fixed a GDALException raised by GDALClose on GDAL >= 2.0 * Quoted the Oracle test user’s password in queries to fix the “ORA-00922: missing or invalid option” error when the password starts with a number or with SLE-12 which provides PIL instead of Pillow.
buildservice-autocommit
accepted
request 1121683
from
Markéta Machová (mcalabkova)
(revision 150)
baserev update by copy to link target
Markéta Machová (mcalabkova)
accepted
request 1121555
from
Alberto Planas Dominguez (aplanas)
(revision 149)
- Update to 4.2.7 * Fixed a regression in Django 4.2 that caused a crash of QuerySet.aggregate() with aggregates referencing expressions containing subqueries * Restored, following a regression in Django 4.2, creating varchar/text_pattern_ops indexes on CharField and TextField with deterministic collations on PostgreSQL
buildservice-autocommit
accepted
request 1117946
from
Daniel Garcia (dgarcia)
(revision 148)
baserev update by copy to link target
Daniel Garcia (dgarcia)
committed
(revision 147)
- Update to 4.2.6 (bsc#1215978, CVE-2023-43665) * CVE-2023-43665: Denial-of-service possibility in django.utils.text.Truncator The input processed by Truncator, when operating in HTML mode, has been limited to the first five million characters in order to avoid potential performance and memory issues. * Fixed a regression in Django 4.2.5 where overriding the deprecated DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings in tests caused the main STORAGES to mutate (#34821). * Fixed a regression in Django 4.2 that caused unnecessary casting of string based fields (CharField, EmailField, TextField, CICharField, CIEmailField, and CITextField) used with the __isnull lookup on PostgreSQL. As a consequence, indexes using an __isnull expression or condition created before Django 4.2 wouldn’t be used by the query planner, leading to a performance regression (#34840).
buildservice-autocommit
accepted
request 1108900
from
Alberto Planas Dominguez (aplanas)
(revision 146)
baserev update by copy to link target
Alberto Planas Dominguez (aplanas)
accepted
request 1108899
from
Alberto Planas Dominguez (aplanas)
(revision 145)
- Update to 4.2.5 (CVE-2023-41164) + Bugfixes * Fixed a regression in Django 4.2 that caused an incorrect validation of CheckConstraints on __isnull lookups against JSONField * Fixed a bug in Django 4.2 where the deprecated DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings were not synced with STORAGES * Fixed a regression in Django 4.2.2 that caused an unnecessary selection of a non-nullable ManyToManyField without a natural key during serialization * Fixed a regression in Django 4.2 that caused a crash of a queryset when filtering against deeply nested OuterRef() annotations
buildservice-autocommit
accepted
request 1101902
from
Alberto Planas Dominguez (aplanas)
(revision 144)
baserev update by copy to link target
Alberto Planas Dominguez (aplanas)
accepted
request 1101901
from
Alberto Planas Dominguez (aplanas)
(revision 143)
- Update to 4.2.4 + Bugfixes * Fixed a regression in Django 4.2 that caused a crash of QuerySet.aggregate() with aggregates referencing window functions * Fixed a regression in Django 4.2 that caused a crash when grouping by a reference in a subquery * Fixed a regression in Django 4.2 that caused aggregation over query that uses explicit grouping by multi-valued annotations to group against the wrong columns
Displaying revisions 21 - 40 of 182