Django 1.4.2 release notes Host header poisoning Backwards incompatible changes Other bugfixes and changes Django 1.4.2 release notes October 17, 2012 This is the second sec...

Django 1.4.5 release notes Django 1.4.5 release notes February 20, 2013 Django 1.4.5 corrects a packaging problem with yesterday’s 1.4.4 release . The release contained stray ...

Django 1.4.6 release notes Mitigated possible XSS attack via user-supplied redirect URLs Bugfixes Django 1.4.6 release notes August 13, 2013 Django 1.4.6 fixes one security i...

Django 1.4.13 release notes Caches may incorrectly be allowed to store and serve private data Malformed redirect URLs from user input not correctly validated Django 1.4.13 rel...

Django 1.4.18 release notes WSGI header spoofing via underscore/dash conflation Mitigated possible XSS attack via user-supplied redirect URLs Denial-of-service attack against dja...

Django 1.6 release notes Python compatibility What’s new in Django 1.6 Simplified default project and app templates Improved transaction management Persistent database connectio...

Django 1.6.1 release notes Bug fixes Django 1.6.1 release notes December 12, 2013 This is Django 1.6.1, a bugfix release for Django 1.6. In addition to the bug fixes listed be...

Django 1.6.11 release notes Denial-of-service possibility with strip_tags() Mitigated possible XSS attack via user-supplied redirect URLs Django 1.6.11 release notes March 18...

Django 1.7 release notes Python compatibility What’s new in Django 1.7 Schema migrations App-loading refactor New method on Field subclasses Calling custom QuerySet methods fr...

Django 1.7.1 release notes Bugfixes Django 1.7.1 release notes October 22, 2014 Django 1.7.1 fixes several bugs in 1.7. Bugfixes Allowed related many-to-many fields to be r...