1. ==========================
    
  2. Django 4.1.2 release notes
    
  3. ==========================
    
  4. 
    
  5. *October 4, 2022*
    
  6. 
    
  7. Django 4.1.2 fixes a security issue with severity "medium" and several bugs in
    
  8. 4.1.1.
    
  9. 
    
  10. CVE-2022-41323: Potential denial-of-service vulnerability in internationalized URLs
    
  11. ===================================================================================
    
  12. 
    
  13. Internationalized URLs were subject to potential denial of service attack via
    
  14. the locale parameter.
    
  15. 
    
  16. Bugfixes
    
  17. ========
    
  18. 
    
  19. * Fixed a regression in Django 4.1 that caused a migration crash on PostgreSQL
    
  20.   when adding a model with ``ExclusionConstraint`` (:ticket:`33982`).
    
  21. 
    
  22. * Fixed a regression in Django 4.1 that caused aggregation over a queryset that
    
  23.   contained an ``Exists`` annotation to crash due to too many selected columns
    
  24.   (:ticket:`33992`).
    
  25. 
    
  26. * Fixed a bug in Django 4.1 that caused an incorrect validation of
    
  27.   ``CheckConstraint`` on ``NULL`` values (:ticket:`33996`).
    
  28. 
    
  29. * Fixed a regression in Django 4.1 that caused a
    
  30.   ``QuerySet.values()/values_list()`` crash on ``ArrayAgg()`` and
    
  31.   ``JSONBAgg()`` (:ticket:`34016`).
    
  32. 
    
  33. * Fixed a bug in Django 4.1 that caused :attr:`.ModelAdmin.autocomplete_fields`
    
  34.   to be incorrectly selected after adding/changing related instances via popups
    
  35.   (:ticket:`34025`).
    
  36. 
    
  37. * Fixed a regression in Django 4.1 where the app registry was not populated
    
  38.   when running parallel tests with the ``multiprocessing`` start method
    
  39.   ``spawn`` (:ticket:`34010`).
    
  40. 
    
  41. * Fixed a regression in Django 4.1 where the ``--debug-mode`` argument to
    
  42.   ``test`` did not work when running parallel tests with the
    
  43.   ``multiprocessing`` start method ``spawn`` (:ticket:`34010`).
    
  44. 
    
  45. * Fixed a regression in Django 4.1 that didn't alter a sequence type when
    
  46.   altering type of pre-Django 4.1 serial columns on PostgreSQL
    
  47.   (:ticket:`34058`).
    
  48. 
    
  49. * Fixed a regression in Django 4.1 that caused a crash for :class:`View`
    
  50.   subclasses with asynchronous handlers when handling non-allowed HTTP methods
    
  51.   (:ticket:`34062`).
    
  52. 
    
  53. * Reverted caching related managers for ``ForeignKey``, ``ManyToManyField``,
    
  54.   and ``GenericRelation`` that caused the incorrect refreshing of related
    
  55.   objects (:ticket:`33984`).
    
  56. 
    
  57. * Relaxed the system check added in Django 4.1 for the same name used for
    
  58.   multiple template tag modules to a warning (:ticket:`32987`).