-
Mon Dec 11 2017 Stephen Gallagher <sgallagh@redhat.com> - 1.6.11.6-7
- Drop the virtual Provides: it doesn't work properly
-
Wed Oct 18 2017 Stephen Gallagher <sgallagh@redhat.com> - 1.6.11.6-6
- Explicitly Provides: python-django so it can work with existing packages
-
Mon Oct 16 2017 Stephen Gallagher <sgallagh@redhat.com> - 1.6.11.6-5
- Update the License field
-
Thu Oct 12 2017 Stephen Gallagher <sgallagh@redhat.com> - 1.6.11.6-4
- Clean up executable scripts
- Update python shebangs
-
Wed Sep 27 2017 Stephen Gallagher <sgallagh@redhat.com> - 1.6.11.6-3
- Fixes from code review
-
Thu Aug 31 2017 Stephen Gallagher <sgallagh@redhat.com> - 1.6.11.6-1
- Produce compatibility package for ReviewBoard
-
Wed Apr 05 2017 Stephen Gallagher <sgallagh@redhat.com> - 1.6.11.6-1
- Update to the latest upstream security release 1.6.11.6
- https://www.reviewboard.org/news/2017/04/04/new-django-1-6-11-6-security-releases/
-
Fri Mar 04 2016 Matthias Runge <mrunge@redhat.com> - 1.6.11-5
- fix CVE-2016-2512 (rhbz#1314345)
- fix CVE-2016-2513
-
Mon Nov 30 2015 Matthias Runge <mrunge@redhat.com> - 1.6.11-4
- fix for CVE-2015-8213 (rhbz#1285279)
backport thanks to https://github.com/beanbaginc/django/
- changed patches to use rdopkg for managing patches
-
Wed Aug 26 2015 Matthias Runge <mrunge@redhat.com> - 1.6.11-3
- cherry-pick fix for Denial-of-service possibility in logout()
view by filling session store CVE-2015-5963, CVE-2015-5964
- Prevented newlines from being accepted in some validators.