Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade Django to resolve security vulnerabilities #886

Closed
amplifi opened this issue Nov 1, 2016 · 2 comments · Fixed by #1015
Closed

Upgrade Django to resolve security vulnerabilities #886

amplifi opened this issue Nov 1, 2016 · 2 comments · Fixed by #1015
Assignees
Labels
Milestone

Comments

@amplifi
Copy link
Contributor

amplifi commented Nov 1, 2016

Current version: 1.9.6
Latest stable version: 1.10.2

Multiple vulns affecting v1.9, listed here: https://docs.djangoproject.com/en/1.10/releases/security/

Changelogs for upgrading from 1.9.6 to 1.10.2: https://docs.djangoproject.com/en/1.10/releases/

Note there are some backwards incompatible changes when coming from 1.9.x: https://docs.djangoproject.com/en/1.10/releases/1.10/#backwards-incompatible-1-10

@seav
Copy link
Contributor

seav commented Nov 1, 2016

Resolving this issue should also resolve #537, though the latter should be confirmed to be fixed first before closing.

@oliverroick
Copy link
Member

I opened a #887 to upgrade to Django 1.9.10, which has the necessary security fixes. Upgrading to 1.10 will take a bit longer, because of incompatible changes.

@amplifi amplifi self-assigned this Nov 11, 2016
@oliverroick oliverroick added this to the Sprint 11 milestone Nov 14, 2016
@oliverroick oliverroick modified the milestones: Sprint 11, Sprint 12 Dec 12, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants