1. ==========================

  2. Django 1.4.9 release notes

  3. ==========================

  4. 

  5. *October 23, 2013*

  6. 

  7. Django 1.4.9 fixes a security-related bug in the 1.4 series and one other

  8. data corruption bug.

  9. 

  10. Readdressed denial-of-service via password hashers

  11. ==================================================

  12. 

  13. Django 1.4.8 imposes a 4096-byte limit on passwords in order to mitigate a

  14. denial-of-service attack through submission of bogus but extremely large

  15. passwords. In Django 1.4.9, we've reverted this change and instead improved

  16. the speed of our PBKDF2 algorithm by not rehashing the key on every iteration.

  17. 

  18. Bugfixes

  19. ========

  20. 

  21. * Fixed a data corruption bug with ``datetime_safe.datetime.combine`` (#21256).
About Sign Up Leave Feedback Contact