[django/django] ec7119: Added release note stubs for 1.5.9 and 1.4.14.

[GitHub]

Branch: refs/heads/master
Home: https://github.com/django/django
Commit: ec71191be0947e22630141e726f0e1f298f930df
https://github.com/django/django/commit/ec71191be0947e22630141e726f0e1f298f930df
Author: Tim Graham <timog...@gmail.com>
Date: 2014-08-20 (Wed, 20 Aug 2014)

Changed paths:
A docs/releases/1.4.14.txt
A docs/releases/1.5.9.txt
M docs/releases/1.6.6.txt
M docs/releases/index.txt

Log Message:
-----------
Added release note stubs for 1.5.9 and 1.4.14.


Commit: 28e765810df46a3f28ff4785491e9973593382fd
https://github.com/django/django/commit/28e765810df46a3f28ff4785491e9973593382fd
Author: Florian Apolloner <flo...@apolloner.eu>
Date: 2014-08-20 (Wed, 20 Aug 2014)

Changed paths:
M django/core/urlresolvers.py
M docs/releases/1.4.14.txt
M docs/releases/1.5.9.txt
M docs/releases/1.6.6.txt
M tests/urlpatterns_reverse/tests.py
M tests/urlpatterns_reverse/urls.py

Log Message:
-----------
Prevented reverse() from generating URLs pointing to other hosts.

This is a security fix. Disclosure following shortly.


Commit: 0d8d30b7ddfe83ab03120f4560c7aa153f4d0ed1
https://github.com/django/django/commit/0d8d30b7ddfe83ab03120f4560c7aa153f4d0ed1
Author: Tim Graham <timog...@gmail.com>
Date: 2014-08-20 (Wed, 20 Aug 2014)

Changed paths:
M django/core/files/storage.py
M docs/howto/custom-file-storage.txt
M docs/ref/files/storage.txt
M docs/releases/1.4.14.txt
M docs/releases/1.5.9.txt
M docs/releases/1.6.6.txt
M docs/releases/1.7.txt
M tests/file_storage/tests.py

Log Message:
-----------
Fixed #23157 -- Removed O(n) algorithm when uploading duplicate file names.

This is a security fix. Disclosure following shortly.


Commit: 5307ce565fbedb9cc27cbe7c757b41a00438d37c
https://github.com/django/django/commit/5307ce565fbedb9cc27cbe7c757b41a00438d37c
Author: Preston Holmes <pre...@ptone.com>
Date: 2014-08-20 (Wed, 20 Aug 2014)

Changed paths:
M django/contrib/auth/middleware.py
M django/contrib/auth/tests/test_remote_user.py
M docs/releases/1.4.14.txt
M docs/releases/1.5.9.txt
M docs/releases/1.6.6.txt

Log Message:
-----------
Fixed #23066 -- Modified RemoteUserMiddleware to logout on REMOTE_USER change.

This is a security fix. Disclosure following shortly.


Commit: 53ff0969822ac2248a89ccb6fef1088212dc800d
https://github.com/django/django/commit/53ff0969822ac2248a89ccb6fef1088212dc800d
Author: Simon Charette <chare...@gmail.com>
Date: 2014-08-20 (Wed, 20 Aug 2014)

Changed paths:
M django/contrib/admin/exceptions.py
M django/contrib/admin/options.py
M django/contrib/admin/views/main.py
M docs/ref/exceptions.txt
M docs/releases/1.4.14.txt
M docs/releases/1.5.9.txt
M docs/releases/1.6.6.txt
M tests/admin_views/tests.py

Log Message:
-----------
Prevented data leakage in contrib.admin via query string manipulation.

This is a security fix. Disclosure following shortly.


Compare: https://github.com/django/django/compare/6f59d2915854...53ff0969822a