# changelog

author: Matthias Runge <mrunge@redhat.com> - 1.6.10-1
changelog:
  - fix CVE-2015-0219 (rhbz#1181939)
  - fix CVE-2015-0220 (rhbz#1181943)
  - fix CVE-2015-0221 (rhbz#1181946)
  - fix CVE-2015-0222 (rhbz#1181951)


author: Matthias Runge <mrunge@redhat.com> - 1.6.11-3
changelog:
  - cherry-pick fix for Denial-of-service possibility in logout()
    view by filling session store CVE-2015-5963, CVE-2015-5964
  - Prevented newlines from being accepted in some validators.


author: Matthias Runge <mrunge@redhat.com> - 1.6.11-4
changelog:
  - fix for CVE-2015-8213 (rhbz#1285279)
    backport thanks to https://github.com/beanbaginc/django/
  - changed patches to use rdopkg for managing patches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.11.6-1
changelog:
  - Update to the latest upstream security release 1.6.11.6
  - https://www.reviewboard.org/news/2017/04/04/new-django-1-6-11-6-security-releases/


