Debian
python-django package

Change logs for python-django source package in Experimental

Experimental (99)
Change log

python-django (3:5.0.4-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/dev/releases/5.0.4/>

 -- Chris Lamb <email address hidden>  Thu, 04 Apr 2024 10:07:42 +0100

python-django (3:5.0.3-1) experimental; urgency=medium

  * New upstream security release:

    - CVE-2024-27351: Fix a potential regular expression denial-of-service
      (ReDoS) attack in django.utils.text.Truncator.words. This method
      (with html=True) and the truncatewords_html template filter were subject
      to a potential regular expression denial-of-service attack via a suitably
      crafted string. This is, in part, a follow up to CVE-2019-14232 and
      CVE-2023-43665.

    <https://docs.djangoproject.com/en/dev/releases/5.0.3/>

 -- Chris Lamb <email address hidden>  Tue, 05 Mar 2024 12:37:11 +0000

python-django (3:5.0.2-1) experimental; urgency=medium

  * New upstream security release:

    - CVE-2024-24680: Potential denial-of-service in intcomma template filter.
      The intcomma template filter was subject to a potential denial-of-service
      attack when used with very long strings.

    <https://docs.djangoproject.com/en/dev/releases/5.0.2/>

 -- Chris Lamb <email address hidden>  Tue, 06 Feb 2024 08:08:50 -0800

python-django (3:5.0.1-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/dev/releases/5.0.1/>

 -- Chris Lamb <email address hidden>  Wed, 03 Jan 2024 11:07:26 +0000

python-django (3:5.0-1) experimental; urgency=medium

  * New upstream stable release.
    https://docs.djangoproject.com/en/5.0/releases/5.0/

 -- Chris Lamb <email address hidden>  Thu, 07 Dec 2023 12:52:28 +0000

python-django (3:5.0~rc1-1) experimental; urgency=medium

  * New upstream RC1 release.
    <https://www.djangoproject.com/weblog/2023/nov/20/django-50-rc1/>

 -- Chris Lamb <email address hidden>  Tue, 21 Nov 2023 08:43:43 +0000

python-django (3:5.0~alpha1-1) experimental; urgency=medium

  * New upstream alpha release.
    <https://www.djangoproject.com/weblog/2023/sep/18/django-50-alpha-1-released/>
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Tue, 19 Sep 2023 11:09:34 -0700

python-django (3:4.2.5-1) experimental; urgency=high

  * New upstream security release:

    - CVE-2023-41164: Potential denial of service vulnerability in
      django.utils.encoding.uri_to_iri(). This method was subject to potential
      denial of service attack via certain inputs with a very large number of
      Unicode characters. (Closes: #1051226)

    <https://www.djangoproject.com/weblog/2023/sep/04/security-releases/>

 -- Chris Lamb <email address hidden>  Mon, 04 Sep 2023 10:41:05 -0700

python-django (3:4.2.4-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/4.2/releases/4.2.4/>

 -- Chris Lamb <email address hidden>  Wed, 02 Aug 2023 07:53:39 +0100

python-django (3:4.2.3-1) experimental; urgency=medium

  * New upstream security release:

    - CVE-2023-36053: Potential regular expression denial of service
      vulnerability in EmailValidator/URLValidator.

      EmailValidator and URLValidator were subject to potential regular
      expression denial of service attack via a very large number of domain
      name labels of emails and URLs. (Closes: #1040225)

 -- Chris Lamb <email address hidden>  Mon, 03 Jul 2023 17:28:20 +0100

python-django (3:4.2.2-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/4.2/releases/4.2.2/>

 -- Chris Lamb <email address hidden>  Mon, 05 Jun 2023 08:12:54 -0700

python-django (3:4.2.1-1) experimental; urgency=high

  * New upstream security release.
  * CVE-2023-31047: Prevent a potential bypass of validation when uploading
    multiple files using one form field.

    Uploading multiple files using one form field has never been supported by
    forms.FileField or forms.ImageField as only the last uploaded file was
    validated. Unfortunately, Uploading multiple files topic suggested
    otherwise. In order to avoid the vulnerability, the ClearableFileInput and
    FileInput form widgets now raise ValueError when the multiple HTML
    attribute is set on them. To prevent the exception and keep the old
    behavior, set the allow_multiple_selected attribute to True.

    For more details on using the new attribute and handling of multiple files
    through a single field, see:

      <https://docs.djangoproject.com/en/stable/topics/http/file-uploads/#uploading-multiple-files>

    (Closes: #1035467)

  * Refresh patches.

 -- Chris Lamb <email address hidden>  Wed, 03 May 2023 09:13:17 -0700

python-django (3:4.2-1) experimental; urgency=medium

  * New upstream stable release:

      This version has been designated as a long-term support (LTS) release,
      which means that security and data loss fixes will be applied for at
      least the next three years. It will also receive fixes for crashing bugs,
      major functionality bugs in newly-introduced features, and regressions
      from older versions of Django for the next eight months until December
      2023.

        -- <https://www.djangoproject.com/weblog/2023/apr/03/django-42-released/>

  * Bump Standards-Version to 4.6.2.

 -- Chris Lamb <email address hidden>  Mon, 03 Apr 2023 12:10:10 +0100

python-django (3:4.2~rc1-1) experimental; urgency=medium

  * New upstream release candidate.

 -- Chris Lamb <email address hidden>  Mon, 20 Mar 2023 08:12:25 +0000

python-django (3:4.2~beta1-1) experimental; urgency=medium

  * New upstream beta release.
    <https://www.djangoproject.com/weblog/2023/feb/20/django-42-beta-1-released/>

 -- Chris Lamb <email address hidden>  Mon, 20 Feb 2023 07:39:15 -0800

python-django (3:4.2~alpha1-1) experimental; urgency=medium

  * New upstream release.
    <https://www.djangoproject.com/weblog/2023/jan/17/django-42-alpha-1-released/>
  * Refresh patches.
  * Upstream does not ship a django/contrib/admin/static/admin/fonts/README.txt
    file anymore, so don't try and install it.
  * Drop old debian/python3-django.NEWS file.

 -- Chris Lamb <email address hidden>  Thu, 19 Jan 2023 10:44:17 -0800

python-django (3:4.1.5-1) experimental; urgency=medium

  * New upstream release.
    <https://docs.djangoproject.com/en/4.1/releases/4.1.5/>
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Tue, 03 Jan 2023 06:56:56 +0000

python-django (3:4.1.4-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/4.1/releases/4.1.4/>

 -- Chris Lamb <email address hidden>  Tue, 06 Dec 2022 21:01:08 +0000

python-django (3:4.1.3-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/4.1/releases/4.1.3/>

 -- Chris Lamb <email address hidden>  Wed, 02 Nov 2022 11:26:08 +0000

python-django (3:4.1.2-1) experimental; urgency=high

  * New upstream security release.
    <https://www.djangoproject.com/weblog/2022/oct/04/security-releases/>

    - CVE-2022-41323: Prevent a potential denial-of-service vulnerability in
      internationalized URLs. Internationalised URLs were subject to potential
      denial of service attack via the locale parameter. This is now escaped to
      avoid this possibility.

 -- Chris Lamb <email address hidden>  Tue, 04 Oct 2022 07:42:45 -0700

python-django (3:4.1.1-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/4.1/releases/4.1.1/>
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Tue, 06 Sep 2022 10:52:34 +0100

python-django (3:4.1-1) experimental; urgency=medium

  * New upstream release
    <https://www.djangoproject.com/weblog/2022/aug/03/django-41-released/>
  * Bump epoch to ensure experimental's version is greater than unstable.

 -- Chris Lamb <email address hidden>  Wed, 03 Aug 2022 07:04:46 -0700

python-django (2:4.1~rc1-1) experimental; urgency=medium

  * New upstream release candidate.
    <https://www.djangoproject.com/weblog/2022/jul/19/django-41-rc1/>
  * Bump Standards-Version to 4.6.1.

 -- Chris Lamb <email address hidden>  Tue, 19 Jul 2022 14:56:52 +0100

python-django (2:4.1~beta1-1) experimental; urgency=medium

  * New upstream beta release.
    <https://www.djangoproject.com/weblog/2022/jun/21/django-41-beta-1-released/>
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Tue, 21 Jun 2022 13:16:45 +0100

python-django (2:4.1~alpha1-1) experimental; urgency=medium

  * New upstream alpha release.
    <https://www.djangoproject.com/weblog/2022/may/18/django-41-alpha-1-released/>
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Wed, 18 May 2022 09:33:55 -0700

python-django (2:4.0.4-1) experimental; urgency=high

  * New upstream security release:

    - CVE-2022-28346: Potential SQL injection in QuerySet.annotate(),
      aggregate(), and extra().

      QuerySet.annotate(), aggregate(), and extra() methods were subject to SQL
      injection in column aliases, using a suitably crafted dictionary, with
      dictionary expansion, as the **kwargs passed to these methods.

    - CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options)
      on PostgreSQL.

      QuerySet.explain() method was subject to SQL injection in option names,
      using a suitably crafted dictionary, with dictionary expansion, as the
      **options argument.

    See <https://www.djangoproject.com/weblog/2022/apr/11/security-releases/>
    for more info.

 -- Chris Lamb <email address hidden>  Tue, 12 Apr 2022 18:13:56 +0200

python-django (2:4.0.3-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/4.0/releases/4.0.3/>
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Wed, 02 Mar 2022 07:52:04 +0000

python-django (2:4.0.2-1) experimental; urgency=medium

  * New upstream security release:

    - CVE-2022-22818: Possible XSS via {% debug %} template tag.
      The {% debug %} template tag didn't properly encode the current context,
      posing an XSS attack vector.

      In order to avoid this vulnerability, {% debug %} no longer outputs
      information when the DEBUG setting is False, and it ensures all context
      variables are correctly escaped when the DEBUG setting is True.

    - CVE-2022-23833: Denial-of-service possibility in file uploads

      Passing certain inputs to multipart forms could result in an
      infinite loop when parsing files.

    See <https://www.djangoproject.com/weblog/2022/feb/01/security-releases/
    for more information. (Closes: #1004752)

 -- Chris Lamb <email address hidden>  Tue, 01 Feb 2022 09:02:51 -0800

python-django (2:4.0.1-2) experimental; urgency=medium

  * Fix compatibility with SQLite 3.37+. (Closes: #1004464)

 -- Chris Lamb <email address hidden>  Fri, 28 Jan 2022 08:57:31 -0800

python-django (2:4.0.1-1) experimental; urgency=medium

  * New upstream security release:

    - CVE-2021-45115: Denial-of-service possibility in
      UserAttributeSimilarityValidator

      UserAttributeSimilarityValidator incurred significant overhead evaluating
      submitted password that were artificially large in relative to the
      comparison values. On the assumption that access to user registration was
      unrestricted this provided a potential vector for a denial-of-service
      attack.

      In order to mitigate this issue, relatively long values are now ignored
      by UserAttributeSimilarityValidator.

    - CVE-2021-45116: Potential information disclosure in dictsort template
      filter

      Due to leveraging the Django Template Language's variable resolution
      logic, the dictsort template filter was potentially vulnerable to
      information disclosure or unintended method calls, if passed a
      suitably crafted key.

      In order to avoid this possibility, dictsort now works with a
      restricted resolution logic, that will not call methods, nor allow
      indexing on dictionaries.

    - CVE-2021-45452: Potential directory-traversal via Storage.save()

      Storage.save() allowed directory-traversal if directly passed suitably
      crafted file names.

    See <https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>
    for more information. (Closes: #1003113)

 -- Chris Lamb <email address hidden>  Tue, 04 Jan 2022 12:03:13 +0000

python-django (2:4.0-1) experimental; urgency=medium

  * New upstream major release.
    <https://www.djangoproject.com/weblog/2021/dec/07/django-40-released/>

 -- Chris Lamb <email address hidden>  Tue, 07 Dec 2021 07:39:47 -0800

python-django (2:4.0~rc1-1) experimental; urgency=medium

  * New upstream RC release.
    <https://www.djangoproject.com/weblog/2021/nov/22/django-40-rc1/>

 -- Chris Lamb <email address hidden>  Mon, 22 Nov 2021 07:44:24 -0800

python-django (2:4.0~beta1-1) experimental; urgency=medium

  * New upstream beta release.
    <https://www.djangoproject.com/weblog/2021/oct/25/django-40-beta-1-released/>

 -- Chris Lamb <email address hidden>  Mon, 25 Oct 2021 15:06:19 +0100

python-django (2:4.0~alpha1-1) experimental; urgency=medium

  * New upstream 4.x alpha release.
    - Update patches.
    - No need to delete django-admin.py script anymore; does not exist.
  * Bump Standards-Version to 4.6.0.

 -- Chris Lamb <email address hidden>  Wed, 22 Sep 2021 09:41:35 +0100

python-django (2:3.2.7-2) experimental; urgency=medium

  * Upload 3.2 branch to unstable.

 -- Chris Lamb <email address hidden>  Thu, 09 Sep 2021 15:51:11 +0100

python-django (2:3.2.7-1) experimental; urgency=medium

  * New upstream bugfix release.

 -- Chris Lamb <email address hidden>  Wed, 01 Sep 2021 10:46:07 +0100

python-django (2:3.2.6-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/3.2/releases/3.2.6/>
  * Bump Standards-Version to 4.5.1.

 -- Chris Lamb <email address hidden>  Mon, 02 Aug 2021 09:16:21 +0100

python-django (2:3.2.5-2) experimental; urgency=medium

  * Don't symlink /usr/bin/django-admin to "django-admin.py"; ship the script
    generated by the entry_points system instead, otherwise we introduce a
    confusing "django-admin.py" deprecation message when using "django-admin".
    (Closes: #991098)

 -- Chris Lamb <email address hidden>  Thu, 15 Jul 2021 13:54:57 +0100

python-django (2:3.2.5-1) experimental; urgency=medium

  * New upstream security release:

    - CVE-2021-35042: Potential SQL injection via unsanitized
      QuerySet.order_by() input.

      Unsanitized user input passed to QuerySet.order_by() could bypass
      intended column reference validation in path marked for deprecation
      resulting in a potential SQL injection even if a deprecation warning is
      emitted. As a mitigation, the strict column reference validation was
      restored for the duration of the deprecation period. This regression
      appeared in Django version 3.1 as a side effect of fixing another bug
      (#31426).

    For more information, please see:
    <https://www.djangoproject.com/weblog/2021/jul/01/security-releases/>

 -- Chris Lamb <email address hidden>  Thu, 01 Jul 2021 10:56:07 +0100

python-django (2:3.2.4-1) experimental; urgency=medium

  * New upstream security release. (Closes: #989394)

    - CVE-2021-33203: Potential directory traversal via admindocs

      Staff members could use the admindocs TemplateDetailView view to
      check the existence of arbitrary files. Additionally, if (and only
      if) the default admindocs templates have been customized by the
      developers to also expose the file contents, then not only the
      existence but also the file contents would have been exposed.

      As a mitigation, path sanitation is now applied and only files
      within the template root directories can be loaded.

      This issue has low severity, according to the Django security
      policy.

      Thanks to Rasmus Lerchedahl Petersen and Rasmus Wriedt Larsen from
      the CodeQL Python team for the report.

    - CVE-2021-33571: Possible indeterminate SSRF, RFI, and LFI attacks
      since validators accepted leading zeros in IPv4 addresses

      URLValidator, validate_ipv4_address(), and
      validate_ipv46_address() didn't prohibit leading zeros in octal
      literals. If you used such values you could suffer from
      indeterminate SSRF, RFI, and LFI attacks.

      validate_ipv4_address() and validate_ipv46_address() validators
      were not affected on Python 3.9.5+.

      This issue has medium severity, according to the Django security
      policy.

  * Bump Standards-Version to 4.5.1.

 -- Chris Lamb <email address hidden>  Wed, 02 Jun 2021 16:08:13 +0100

python-django (2:3.2.3-1) experimental; urgency=medium

  * New upstream release.
    <https://docs.djangoproject.com/en/3.2/releases/3.2.3/>

 -- Chris Lamb <email address hidden>  Thu, 13 May 2021 10:25:49 +0100

python-django (2:3.2.2-1) experimental; urgency=medium

  * New upstream security release:
    - CVE-2021-32052: Header injection possibility since URLValidator accepted
      newlines in input on Python 3.9.5+. (Closes: #988136)
    - Full release notes:
      <https://www.djangoproject.com/weblog/2021/may/06/security-releases/>

 -- Chris Lamb <email address hidden>  Thu, 06 May 2021 13:04:03 +0100

python-django (2:3.2.1-1) experimental; urgency=medium

  * New upstream security release:
    - CVE-2021-31542: Potential directory-traversal via uploaded files.
      (Closes: #988053)
    - Full release notes:
      <https://www.djangoproject.com/weblog/2021/may/04/security-releases/>
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Tue, 04 May 2021 12:59:07 +0100

python-django (2:3.2-1) experimental; urgency=medium

  * New upstream major release:

    - Full release notes: <https://docs.djangoproject.com/en/3.2/releases/3.2/>
    - CVE-2021-28658: The MultiPartParser class allowed directory-traversal
      via uploaded files via maliciously crafted filenames. (Closes: #986447)

 -- Chris Lamb <email address hidden>  Tue, 06 Apr 2021 11:38:48 +0100

python-django (2:3.2~rc1-1) experimental; urgency=medium

  * New upstream release candidate.
    <https://www.djangoproject.com/weblog/2021/mar/18/django-32-rc1/#s-id5>
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Fri, 19 Mar 2021 09:56:40 +0000

python-django (2:3.2~beta1-1) experimental; urgency=medium

  * New upstream beta release.
    <https://www.djangoproject.com/weblog/2021/feb/19/django-32-beta-1-released/>
  * Apply wrap-and-sort -sa.

 -- Chris Lamb <email address hidden>  Fri, 19 Feb 2021 16:13:21 +0000

python-django (2:3.2~alpha1-2) experimental; urgency=medium

  * Apply security fix from upstream:

    - CVE-2021-23336: Prevent a web cache poisoning attack via "parameter
      cloaking". Django contains a copy of urllib.parse.parse_qsl() which was
      added to backport some security fixes. A further security fix has been
      issued recently such that parse_qsl() no longer allows using ";" as a
      query parameter separator by default. (Closes: #983090)

    <https://www.djangoproject.com/weblog/2021/feb/19/security-releases/>

 -- Chris Lamb <email address hidden>  Fri, 19 Feb 2021 09:28:42 +0000

python-django (2:3.2~alpha1-1) experimental; urgency=medium

  * New upstream alpha release.
    <https://www.djangoproject.com/weblog/2021/jan/19/django-32-alpha-1-released/>
  * Refresh patches.
  * Drop no-upstream-changelog overrides; removed from Lintian.

 -- Chris Lamb <email address hidden>  Wed, 20 Jan 2021 09:27:49 +0000

python-django (2:3.1.5-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/3.1/releases/3.1.5/>

 -- Chris Lamb <email address hidden>  Mon, 04 Jan 2021 12:45:20 +0000

python-django (2:3.1.4-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/3.1/releases/3.1.4/>
  * Bump Standards-Version to 4.5.1.

 -- Chris Lamb <email address hidden>  Tue, 01 Dec 2020 11:25:32 +0000

python-django (2:3.1.3-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/stable/releases/3.1.3/>

 -- Chris Lamb <email address hidden>  Tue, 03 Nov 2020 11:59:29 +0000

python-django (2:3.1.2-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://www.djangoproject.com/weblog/2020/oct/01/django-bugfix-release-312/>
  * Update Maintainer field with new Debian Python Team contact address.
  * Update Vcs-* fields with new Debian Python Team Salsa layout.

 -- Chris Lamb <email address hidden>  Thu, 01 Oct 2020 10:06:16 +0100

python-django (2:3.1.1-1) experimental; urgency=medium

  * New upstream security release to address CVE-2020-24583, CVE-2020-24584.
    (Closes: #969367)
    <https://www.djangoproject.com/weblog/2020/sep/01/security-releases/>

 -- Chris Lamb <email address hidden>  Tue, 01 Sep 2020 12:32:23 +0100

python-django (2:3.1-2) experimental; urgency=medium

  * Set the PYTHONPATH in the autopkgtests in the same way that we do in
    debian/rules. (Closes: #968577)

 -- Chris Lamb <email address hidden>  Mon, 17 Aug 2020 23:11:30 +0100

python-django (2:3.1-1) experimental; urgency=medium

  * New upstream release.
    <https://docs.djangoproject.com/en/3.1/releases/3.1/>

 -- Chris Lamb <email address hidden>  Tue, 04 Aug 2020 10:11:43 +0100

python-django (2:3.1~rc1-1) experimental; urgency=medium

  * New upstream release candidate release.
    <https://www.djangoproject.com/weblog/2020/jul/20/django-31-release-candidate-1-released/>

 -- Chris Lamb <email address hidden>  Mon, 20 Jul 2020 11:43:40 +0100

python-django (2:3.1~beta1-1) experimental; urgency=medium

  * New upstream beta release.
    <https://www.djangoproject.com/weblog/2020/jun/15/django-31-beta-1-released/>
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Mon, 15 Jun 2020 11:30:39 +0100

python-django (2:3.0.7-2) experimental; urgency=medium

  * Fix a regression in the handling of CVE-2020-13596.
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Sat, 13 Jun 2020 15:15:34 +0100

python-django (2:3.0.7-1) experimental; urgency=medium

  * New upstream security release.
    <https://www.djangoproject.com/weblog/2020/jun/03/security-releases/>

 -- Chris Lamb <email address hidden>  Wed, 03 Jun 2020 21:16:00 +0100

python-django (2:3.0.6-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/3.0/releases/3.0.6/>

 -- Chris Lamb <email address hidden>  Mon, 04 May 2020 19:33:25 +0100

python-django (2:3.0.5-1) experimental; urgency=medium

  * New upstream release.
    <https://docs.djangoproject.com/en/3.0/releases/3.0.5/>
  * Refresh all patches.

 -- Chris Lamb <email address hidden>  Wed, 01 Apr 2020 10:35:42 +0100

python-django (2:3.0.4-1) experimental; urgency=medium

  * New upstream security release. (Closes: #953102)
    <https://www.djangoproject.com/weblog/2020/mar/04/security-releases/>
  * Bump Standards-Version to 4.5.0.
  * Refresh debian/patches/0004-Use-locally-installed-documentation-sources.patch.

 -- Chris Lamb <email address hidden>  Wed, 04 Mar 2020 08:22:30 -0800

python-django (2:3.0.2-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://www.djangoproject.com/weblog/2020/jan/02/django-bugfix-release-302/>
  * Add python3-selenium to test-dependencies and to a runtime "Suggests".
    (Closes: #947549)

 -- Chris Lamb <email address hidden>  Thu, 02 Jan 2020 10:52:39 +0000

python-django (2:3.0.1-1) experimental; urgency=medium

  * New upstream security release.
    <https://www.djangoproject.com/weblog/2019/dec/18/security-releases/>
    (Closes: #946937)

 -- Chris Lamb <email address hidden>  Mon, 30 Dec 2019 10:44:01 +0000

python-django (2:3.0-1) experimental; urgency=medium

  * New upstream release.
    <https://www.djangoproject.com/weblog/2019/dec/02/django-3-released/>

 -- Chris Lamb <email address hidden>  Mon, 02 Dec 2019 12:24:50 +0000

python-django (2:3.0~rc1-1) experimental; urgency=medium

  * New upstream release candidate release.
    <https://www.djangoproject.com/weblog/2019/nov/18/django-30-release-candidate-1-released/>

 -- Chris Lamb <email address hidden>  Mon, 18 Nov 2019 11:25:38 -0500

python-django (2:3.0~beta1-1) experimental; urgency=medium

  * New upstream beta release.
    <https://www.djangoproject.com/weblog/2019/oct/14/django-30-beta-1-released/>
  * Bump Standards-Version to 4.4.1.
  * wrap-and-sort -sa.

 -- Chris Lamb <email address hidden>  Mon, 14 Oct 2019 11:11:10 -0700

python-django (2:3.0~alpha1-1) experimental; urgency=medium

  * New upstream alpha release.
    <https://www.djangoproject.com/weblog/2019/sep/10/django-30-alpha-1-released/>
  * Refresh all patches.
  * Add asgiref to build and runtime dependencies.
  * Update debian/copyright.

 -- Chris Lamb <email address hidden>  Tue, 10 Sep 2019 11:22:45 +0100

python-django (2:2.2.3-1) experimental; urgency=medium

  * New upstream security release.
    <https://www.djangoproject.com/weblog/2019/jul/01/security-releases/>
    (Closes: #931316)

 -- Chris Lamb <email address hidden>  Mon, 01 Jul 2019 16:56:16 -0300

python-django (2:2.2.1-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/2.2/releases/2.2.1/>

 -- Chris Lamb <email address hidden>  Wed, 01 May 2019 10:53:33 +0100

python-django (2:2.2-1) experimental; urgency=medium

  * New upstream realease.
    <https://docs.djangoproject.com/en/2.2/releases/2.2/>

 -- Chris Lamb <email address hidden>  Mon, 01 Apr 2019 21:45:56 +0200

python-django (2:2.2~rc1-1) experimental; urgency=medium

  * New upstream release candidate release.
    <https://www.djangoproject.com/weblog/2019/mar/18/django-22-rc1/>
  * Drop a test that fails with "OverflowError: timestamp out of range for
    platform time_t" on 32-bit platforms. (Closes: #924784)

 -- Chris Lamb <email address hidden>  Mon, 18 Mar 2019 10:30:05 -0400

python-django (2:2.2~beta1-1) experimental; urgency=medium

  * New upstream beta release.
    <https://www.djangoproject.com/weblog/2019/feb/11/django-22-beta-1-released/>

 -- Chris Lamb <email address hidden>  Mon, 11 Feb 2019 14:47:30 +0100

python-django (2:2.2~alpha1-1) experimental; urgency=medium

  * New upstream alpha release.
    <https://www.djangoproject.com/weblog/2019/jan/17/django-22-alpha-1/>

 -- Chris Lamb <email address hidden>  Thu, 17 Jan 2019 18:19:06 +0000

python-django (2:2.1.5-1) experimental; urgency=medium

  * New upstream security release:
    - CVE-2019-3498: Content spoofing possibility in the default 404 page.
      (Closes: #918230)
    <https://www.djangoproject.com/weblog/2019/jan/04/security-releases/>
  * Drop 0007-Fixed-29182-Adjusted-SQLite-schema-table-alteration-.patch;
    applied upstream. (re. #915626)
  * Move to debhelper-compat virtual package.
  * debian/control:
    - Bump debhelper compatibility level to 12.
    - Bump Standards-Version to 4.3.0.

 -- Chris Lamb <email address hidden>  Fri, 04 Jan 2019 18:49:35 +0100

python-django (2:2.1.4-2) experimental; urgency=medium

  * Apply patch from upstream to fix compatibility with SQLite 3.26.
    (Closes: #915626)

 -- Chris Lamb <email address hidden>  Fri, 07 Dec 2018 13:53:33 +0100

python-django (2:2.1.4-1) experimental; urgency=medium

  * New upstream bugfix release:
    <https://docs.djangoproject.com/en/stable/releases/2.1.4/>
  * Refresh patches.

 -- Chris Lamb <email address hidden>  Mon, 03 Dec 2018 22:57:24 +0100

python-django (2:2.1.3-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/2.1/releases/2.1.3/>

 -- Chris Lamb <email address hidden>  Thu, 01 Nov 2018 15:39:14 +0000

python-django (2:2.1.2-2) experimental; urgency=medium

  * Default to supporting Spatialite >= 4.2. (Closes: #910240)
  * debian/control: Update libgdal's SONAME in Suggests.
  * Add libsqlite3-mod-spatialite to Suggests.

 -- Chris Lamb <email address hidden>  Thu, 04 Oct 2018 10:22:37 +0100

python-django (2:2.1.2-1) experimental; urgency=medium

  * New upstream security release.

    CVE-2018-16984: Password hash disclosure to "view only" admin users. If an
    admin user has the change permission to the user model, only part of the
    password hash is displayed in the change form. Admin users with the view
    (but not change) permission to the user model were displayed the entire
    hash.  While it's typically infeasible to reverse a strong password hash,
    if a site uses weaker password hashing algorithms such as MD5 or SHA1,
    it could be a problem. (Closes: #910016)

  * Move all documentation to /usr/share/doc.
  * Really remove all license files (eg. LICENSE-SELECT2.md).
  * debian/tests/control: Drop deprecated needs-recommends test restriction.

 -- Chris Lamb <email address hidden>  Mon, 01 Oct 2018 14:23:27 +0100

python-django (2:2.1.1-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/2.1/releases/2.1.1/>
  * Bump Standards-Version to 4.2.1.

 -- Chris Lamb <email address hidden>  Sat, 01 Sep 2018 09:28:27 +0100

python-django (2:2.1-1) experimental; urgency=medium

  * New upstream release.
    - CVE-2018-14574: Open redirect possibility in CommonMiddleware.
      (Closes: #905216)

 -- Chris Lamb <email address hidden>  Wed, 01 Aug 2018 22:59:20 +0800

python-django (2:2.1~rc1-1) experimental; urgency=medium

  * New upstream RC release.
    <https://www.djangoproject.com/weblog/2018/jul/18/django-21-rc1/>
  * Bump Standards-Version to 4.1.5.

 -- Chris Lamb <email address hidden>  Thu, 19 Jul 2018 12:11:45 +0800

python-django (2:2.1~beta1-1) experimental; urgency=medium

  * New upstream beta release. (Closes: #901526)
    <https://www.djangoproject.com/weblog/2018/jun/18/django-21-beta-1-released/>.
  * Patches:
    - Drop 0006-Fixed-a-missing-pyc-test-file-in-source-distribution.patch;
      applied upstream.
    - Refresh all patches.
    - Set gbp-pq's --abbrev's default to 12 in gbp.conf.
  * Drop "old" X-Python-Version header in debian/control.
  * debian/rules:
    - Also remove LICENSE.md files.
    - Delete all extra license files, not just the ones in the main package.
    - Move dropping of extra license files to dh_installdocs.

 -- Chris Lamb <email address hidden>  Tue, 19 Jun 2018 09:10:39 +0200

python-django (2:2.1~alpha1-1) experimental; urgency=medium

  * New upstream alpha release.
    <https://docs.djangoproject.com/en/dev/releases/2.1/>.
    - Refresh 0002-use_debian_geoip_database_as_default.diff.

 -- Chris Lamb <email address hidden>  Fri, 18 May 2018 10:52:01 +0200

python-django (2:2.0.5-1) experimental; urgency=medium

  * New upstream bugfix release
    <https://docs.djangoproject.com/en/2.0/releases/2.0.5/>.
    - Rebase and refresh patches.
  * Bump Standards-Version to 4.1.4.

 -- Chris Lamb <email address hidden>  Wed, 02 May 2018 09:30:23 -0700

python-django (2:2.0.4-1) experimental; urgency=medium

  * New upstream bugfix release
    <https://docs.djangoproject.com/en/2.0/releases/2.0.4/>.
  * Update Vcs-Git and Vcs-Browser to salsa.
  * Bump debhelper compatibility level to 11.
  * Drop debian/python-django-doc.examples.

 -- Chris Lamb <email address hidden>  Tue, 03 Apr 2018 09:29:46 +0100

python-django (2:2.0.3-1) experimental; urgency=medium

  * New upstream security release:
    - CVE-2018-7536: Denial-of-service possibility in urlize and urlizetrunc
      template filters.
    - CVE-2018-7537: Denial-of-service possibility in truncatechars_html and
      truncatewords_html template filters

 -- Chris Lamb <email address hidden>  Tue, 06 Mar 2018 22:19:24 -0800

python-django (2:2.0.2-1) experimental; urgency=medium

  * New upstream security release:
    - CVE-2018-6188: A regression in Django 1.11.8 made
      django.contrib.auth.forms.AuthenticationForm run its
      confirm_login_allowed() method even if an incorrect password is entered.
      This can leak information about a user, depending on what messages
      confirm_login_allowed() raises. If confirm_login_allowed() isn't
      overridden, an attacker enter an arbitrary username and see if that user
      has been set to is_active=False. If confirm_login_allowed() is
      overridden, more sensitive details could be leaked.
  * Use HTTPS Format: URI in debian/copyright.

 -- Chris Lamb <email address hidden>  Thu, 01 Feb 2018 17:57:13 +0000

python-django (2:2.0.1-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/2.0/releases/2.0.1/>
  * Bump Standards-Version to 4.1.3.

 -- Chris Lamb <email address hidden>  Tue, 02 Jan 2018 10:53:43 +0000

python-django (2:2.0-1) experimental; urgency=medium

  * New upstream stable release.
    https://docs.djangoproject.com/en/2.0/releases/2.0/

 -- Chris Lamb <email address hidden>  Sat, 02 Dec 2017 18:36:33 +0000

python-django (1:2.0~rc1-1) experimental; urgency=medium

  * New upstream release candidate.
    <https://www.djangoproject.com/weblog/2017/nov/15/django-20-release-candidate-1-released/>
  * Drop trailing whitespace in debian/changelog.

 -- Chris Lamb <email address hidden>  Thu, 16 Nov 2017 09:55:14 +0900

python-django (1:2.0~beta1-1) experimental; urgency=medium

  * New upstream beta release of Django 2.0.
    <https://www.djangoproject.com/weblog/2017/oct/16/django-20-beta-1-released/>
  * debian/watch:
    - Use HTTPS URI to avoid debian-watch-uses-insecure-uri warning.
    - uversionmangle alpha releases prefixed with "a" (eg. 2.0a1 → 2.0~alpha1)
  * Bump Standards-Version to 4.1.1.

 -- Chris Lamb <email address hidden>  Mon, 16 Oct 2017 23:26:52 -0400

python-django (1:2.0~alpha1-2) experimental; urgency=medium

  New upstream alpha release of Django 2.0.
  <https://docs.djangoproject.com/en/dev/releases/2.0/>

  * Drop Python 2.x support:
    - Remove python-django and python-django-common binary packages and
      splitting logic.
    - Drop our local debian/django-admin wrapper, making /usr/bin/django-admin
      a symlink to the version under dist-packages.
    - Consolidate a number of files under debian/.
    - Simplify autopkgtests to reflect lack of Python 2.x support.

  * deban/control:
    - Add Replaces/Breaks on python-django and python-django-common.
    - Add Replaces/Breaks/Provodes on python-django-common.
    - Bump X-Python-Version to 3.5.
    - Bump Standards-Version to 4.1.0.
    - Move python-doc Depends to python3-doc.
    - Drop extra whitespaces.
    - Move sphinx-doc Build-Dependency to python3-sphinx.

  * debian/rules:
    - Correct find(1) call to delete all license files.
    - Drop explicitly excluding .js and objects.inv files; this is done by
      dh_compress now.
    - Be explicit when removing embedded Javascript libraries.

  * debian/patches/*:
    - Update 0002-use_debian_geoip_database_as_default.diff to reflect new
      location of base.py.
    - Drop 0003-Fixed-test_middleware_classes_headers-if-Django-sour.patch;
      merged upstream.
    - Refresh 0004-Use-locally-installed-documentation-sources.patch.
    - Ensure the default shebang for new projects uses Python 3.x.
    - Make patches "pq import -> pq export clean".

  * Lintian:
    - Add "python-script-but-no-python-dep" override for "manage.py-tpl". This
      is not a true Python script, it's a template only.
    - Add source overrides for "source-contains-prebuilt-javascript-object"
      files under django/contrib/admin/static/admin/js. These are not bugs
      and/or upstream will not remove them from the orig tarball anyway.
    - Add overrides for "no-upstream-changelog"; we ship upstream's excellent
      release notes in the python-django-doc package.
    - Drop unnecessary overrides.

 -- Chris Lamb <email address hidden>  Tue, 26 Sep 2017 18:01:30 +0100

python-django (1:1.11.2-1) experimental; urgency=medium

  [ Chris Lamb ]
  * New upstream minor release.
    <https://docs.djangoproject.com/en/1.11/releases/1.11.2/>
  * Backport patch from <https://code.djangoproject.com/ticket/26755> to
    prevent test_middleware_classes_headers from failing if the Django source
    is not writable. This should fix the autopkgtests. (Closes: #816435)
  * Refresh all patches with ``pq import && pq export --renumber``.

  [ Raphaël Hertzog ]
  * Update README.source and debian/gbp.conf.
  * Document a minimal Django packaging policy in
    README.Django-packaging-policy. (Closes: #863514)
  * Remove README.Debian which contained only outdated information.
  * Drop FastCGI initscript, it's obsolete, WSGI is required nowadays.
  * Drop migrate-south helper script as south is gone for a long time already.
  * Add same documentation in python3-django as in python-django.
    (Closes: #831838)

 -- Chris Lamb <email address hidden>  Fri, 02 Jun 2017 09:38:16 +0100

python-django (1:1.11.1-3) experimental; urgency=medium

  * Really add Build-Depends on libgdal-dev.

 -- Chris Lamb <email address hidden>  Sat, 06 May 2017 20:32:33 +0200

python-django (1:1.11-1) experimental; urgency=medium

  * New upstream stable release. (Closes: #859515, #859516)

 -- Chris Lamb <email address hidden>  Wed, 05 Apr 2017 09:54:00 +0200

python-django (1:1.11~rc1-1) experimental; urgency=medium

  * New upstream beta release.

 -- Chris Lamb <email address hidden>  Wed, 22 Mar 2017 20:53:02 +0000

python-django (1:1.11~beta1-1) experimental; urgency=medium

  * New upstream beta release.
  * Update debian/gbp.conf.
  * Drop taskset calls when running testsuite now that
    <https://code.djangoproject.com/ticket/27741> has been resolved.

 -- Chris Lamb <email address hidden>  Wed, 22 Feb 2017 07:43:29 +0800

python-django (1:1.11~alpha1-1) experimental; urgency=medium

  * New upstream alpha release.
  * Match/mangle upstream versions using (eg.) "b1" instead of "beta1" in
    debian/watch.
  * Drop now-unused source-is-missing Lintian overrides.
  * Limit parallelism in testsuite to avoid FTBFS. See:
    <https://code.djangoproject.com/ticket/27741>

 -- Chris Lamb <email address hidden>  Wed, 25 Jan 2017 14:30:58 +1300

python-django (1:1.10~beta1-2) experimental; urgency=medium

  * Need to bump Debian revision due to change of .dsc contents.

 -- Chris Lamb <email address hidden>  Sun, 26 Jun 2016 12:22:46 +0200

python-django (1.9~rc2-2) experimental; urgency=medium

  * Move {app,project}_template to python-django-common to prevent
    byte-compilation (via pycompile) on installation, causing failure. They are
    not valid Python files until variables have been interpolated.

 -- Chris Lamb <email address hidden>  Thu, 26 Nov 2015 14:53:11 +0200

python-django (1.8.5-1) experimental; urgency=medium

  * New upstream bugfix release:
    https://www.djangoproject.com/weblog/2015/oct/03/bugfix-release-issued/

 -- Raphaël Hertzog <email address hidden>  Tue, 13 Oct 2015 11:37:24 +0200

python-django (1.8.4-1) experimental; urgency=medium

  * New upstream security release:
    https://www.djangoproject.com/weblog/2015/aug/18/security-releases/
    It fixes:
    - CVE-2015-5964: possible denial-of-service in logout() view
  * Update debian/copyright to copyright-format 1.0.

 -- Luke Faraone <email address hidden>  Wed, 19 Aug 2015 03:55:47 +0000

python-django (1.8.3-1) experimental; urgency=medium

  * New upstream security release:
    https://www.djangoproject.com/weblog/2015/jul/08/security-releases/
    It fixes:
    - CVE-2015-5143: possible denial-of-service by filling session store
    - CVE-2015-5144: possible header injection since validators accept
      newlines in input
    - CVE-2015-5145: possible denial-of-service in URL validation
  * Drop fix-assertRaisesMessage.patch and
    fix-test-extended-length-storage.patch which have been merged upstream.

 -- Raphaël Hertzog <email address hidden>  Thu, 09 Jul 2015 01:53:02 +0200

python-django (1.8.2-1) experimental; urgency=medium

  * New upstream security release:
    https://www.djangoproject.com/weblog/2015/may/20/security-release/
  * Install bash completion file into /usr/share/bash-completion/completions/

 -- Raphaël Hertzog <email address hidden>  Thu, 21 May 2015 15:59:36 +0200

python-django (1.8.1-1) experimental; urgency=medium

  * New major upstream release:
    https://docs.djangoproject.com/en/1.8/releases/1.8/
    https://docs.djangoproject.com/en/1.8/releases/1.8.1/
  * Refresh all patches.
  * Drop 03_manpage.diff, merged upstream.
  * Clean up rules since we can use the pristine docs directory, now
    that they refer to django-admin and not django-admin.py
  * Add jinja2 and mock as build dependencies required by the test
    suite.
  * Add fix-assertRaisesMessage.patch to make the package build with
    python 2.7.10~rc1 which is affected by
    https://bugs.python.org/issue24134
  * Add fix-test-extended-length-storage.patch to make the package build
    even when AUFS is in use (and when the max length of a filename is
    shorter than usual).

 -- Raphaël Hertzog <email address hidden>  Wed, 20 May 2015 09:54:47 +0200

python-django (1.7.4-1~exp1) experimental; urgency=medium


  * New upstream bugfix release.
  * Drop fix-24193-python34-test-failure.diff, merged upstream.

 -- Raphaël Hertzog <email address hidden>  Wed, 28 Jan 2015 09:38:24 +0100

python-django (1.7.3-1~exp1) experimental; urgency=high


  [ Luke Faraone ]
  * New upstream security release.
    - WSGI header spoofing via underscore/dash conflation (CVE-2015-0219)
    - Possible XSS attack via user-supplied redirect URLs (CVE-2015-0220)
    - DoS attack against django.views.static.serve (CVE-2015-0221)
    - Database DoS with ModelMultipleChoiceField (CVE-2015-0222)
    Closes: #775375

  [ Raphaël Hertzog ]
  * Add patch fix-24193-python34-test-failure.diff to fix a test failure with
    Python3.4.

 -- Raphaël Hertzog <email address hidden>  Wed, 21 Jan 2015 09:56:19 +0100

python-django (1.7.2-1) experimental; urgency=medium


  [ Raphaël Hertzog ]
  * Add geoip-database-extra as an alternative to geoip-database-contrib.

  [ Brian May ]
  * New upstream version.

 -- Brian May <email address hidden>  Mon, 05 Jan 2015 13:57:16 +1100

python-django (1.7-1) experimental; urgency=medium


  * New major upstream release.
  * Add a NEWS file to document the incompatibility with South.

 -- Raphaël Hertzog <email address hidden>  Mon, 08 Sep 2014 10:19:12 +0200

python-django (1.7~c3-1) experimental; urgency=medium


  * New upstream release candidate with security fixes:
    https://www.djangoproject.com/weblog/2014/aug/20/security/

 -- Raphaël Hertzog <email address hidden>  Fri, 22 Aug 2014 22:50:32 +0200

python-django (1.7~c2-2) experimental; urgency=medium


  * Merge changes from 1.6.5-4:
    * Don't output stuff to stdout in django-admin. Closes: #757145
    * Update Vcs-* fields since the packaging repository moved to git.

 -- Raphaël Hertzog <email address hidden>  Fri, 08 Aug 2014 14:26:47 +0200

python-django (1.7~c2-1) experimental; urgency=medium


  * New upstream release candidate.

 -- Raphaël Hertzog <email address hidden>  Wed, 30 Jul 2014 20:47:10 +0200

python-django (1.7~c1+20140722-2) experimental; urgency=medium


  * Move django-admin manual page in python-django-common. Bump version
    constraint in Breaks/Replaces accordingly.
  * Drop conflicting django-admin in python-django and python3-django that
    were not removed as usual because upstream stopped installing them as
    django-admin.py.
  * Drop extra license files.
  * Fix shebang lines in python3-django.
  * Drop empty left-over /usr/bin directories in python-django/python3-django.

 -- Raphaël Hertzog <email address hidden>  Tue, 22 Jul 2014 23:29:30 +0200

python-django (1.7~c1+20140722-1) experimental; urgency=medium


  * New upstream release candidate. We want this version in jessie so we
    should prepare now.
  * Snapshot tarball generated with "python setup.py sdist" after having
    applied fix submitted in https://code.djangoproject.com/ticket/23072
  * Added python-sqlparse, python-tz to Recommends
  * Added other optional dependencies (python-memcache, python-pil,
    python-bcrypt) to Suggests
  * Add all those dependencies in Build-Depends for the benefit of the
    test suite.
  * Run the test suite for python2 and python3.
  * Differentiate descriptions of python2 and python3 packages. 

 -- Raphaël Hertzog <email address hidden>  Mon, 21 Jul 2014 21:57:07 +0200

python-django (1.5.1-1) experimental; urgency=low


  * New upstream release.
  * Add self to uploaders field.

 -- Luke Faraone <email address hidden>  Thu, 28 Mar 2013 17:17:10 -0400

python-django (1.5-1) experimental; urgency=low


  * New upstream release. Closes: #646634, #663230, #436983

 -- Luke Faraone <email address hidden>  Fri, 22 Mar 2013 17:52:30 -0400

python-django (1.2~rc1-1) experimental; urgency=low


  * New upstream release candidate.
  * Remove "02-embedded_code_copies.diff" - not needed anymore.
  * Refresh "01_disable_url_verify_regression_tests.diff".
  * Refresh "04_hyphen-manpage.diff".
  * Temporarily disable test runner due to failing date-related tests.

 -- Chris Lamb <email address hidden>  Thu, 06 May 2010 10:25:10 +0100

python-django (1.2~beta1-1) experimental; urgency=low


  * New upstream development release.
  * Switch to dpkg-source 3.0 (quilt) format
  * Bump Standards-Version to 3.8.4.
  * Remove "0.96 -> 1.x" NEWS entry.
  * jQuery added to admin system upstream:
    - Add libjs-jquery to python-django's Recommends
    - Use symlinks so we use the version from libjs-query over an embedded code
      copy.

 -- Chris Lamb <email address hidden>  Tue, 09 Feb 2010 13:47:34 +0000

python-django (1.2~alpha1-1) experimental; urgency=low


  * New upstream development release:

     This is the first in a series of preview/development releases leading up
     to the eventual release of Django 1.2, currently scheduled to take place
     in March 2010. 

     <http://docs.djangoproject.com/en/dev//releases/1.2-alpha-1/>

  * Update "01_disable_url_verify_regression_tests.diff" - tests now use the
    unittest module instead of doctests.
  * Update "02-embedded_code_copies.diff".
  * Remove "05_ftbfs_in_november.diff" - applied upstream.
  * Remove "06_python_2.6.3_regression.diff" - applied upstream.
  * Update dh_auto_test - database engine is set differently in 1.2.
  * Remove useless ._DS_Store files.

 -- Chris Lamb <email address hidden>  Wed, 06 Jan 2010 14:34:37 +0000

python-django (1.1~rc1-2) experimental; urgency=low


  * Ship FastCGI initscript and /etc/default file in python-django's examples
    directory (Closes: #538863)

 -- Chris Lamb <email address hidden>  Tue, 28 Jul 2009 14:14:45 +0200

python-django (1.1~rc1-1) experimental; urgency=low


  * New upstream release.
  * Drop "05_10539-sphinx06-compatibility.diff"; it has been applied upstream.
  * Bump Standards-Version to 3.8.2.
  * Remove ".DS_Store" directories.

 -- Chris Lamb <email address hidden>  Wed, 22 Jul 2009 09:44:30 +0100

python-django (1.1~beta1-4) experimental; urgency=low


  * Fix compatibility with Python 2.6 and Python transitions in general. Thanks
    to Krzysztof Klimonda <email address hidden>.

 -- Chris Lamb <email address hidden>  Sat, 16 May 2009 00:20:39 +0100

python-django (1.1~beta1-3) experimental; urgency=low


  * Apply patch from <http://code.djangoproject.com/ticket/10539> to fix
    FTBFS when using python-sphinx >= 0.6. (Closes: #527492)

 -- Chris Lamb <email address hidden>  Sun, 10 May 2009 22:17:57 +0100

python-django (1.1~beta1-2) experimental; urgency=low


  * Fix issue where newly created projects do not have their manage.py file
    executable.

 -- Chris Lamb <email address hidden>  Thu, 26 Mar 2009 23:26:09 +0000

python-django (1.1~beta1-1) experimental; urgency=low


  * New upstream release.
  * Merge all changes from unstable branch:
    - Split documentation into new python-django-doc binary package.

 -- Chris Lamb <email address hidden>  Tue, 24 Mar 2009 23:11:57 +0000

python-django (1.1~alpha1-1) experimental; urgency=low


  * New upstream "alpha preview package": "this package is not for production
    use, but if you'd like to try out some of the new features or help track
    down bugs, feel free to download it and give it a test."
  * Just Build-Depend on `python', not `python-dev'.
  * Move to debhelper 7.
  * Drop versions on Build-Depends where they are satisfied in current
    oldstable (ie. etch).
  * Remove repeated 'Priority' line in binary package stanza.
  * Update crufty long and short descriptions.
  * Add ${misc:Depends} in binary stanza for debhelper-using package.
  * Remove bashisms from binary-post-install.

 -- Chris Lamb <email address hidden>  Wed, 25 Feb 2009 01:28:47 +0000

Debianpython-django package

Change logs for python-django source package in Experimental

Debian
python-django package