Skip to content

release_2.3

1. v2.3.11 (2026-10-21)

1.1 New Features

  • bump django lower limit to 5.2.12 (fix high CVE-2026-25673) (backport #705) (#706)
  • bump django minimal version to 5.2.13 in plugin django3 (#708) (#709)
  • bump Django minimum version to 5.2.17 to fix high CVE-2026-15307 (backport #717) (#718)

1.2 Bug Fixes

  • Django package name from pypi.org (backport #711) (#712)

2. v2.3.10 (2026-02-06)

  • No interesting change

3. v2.3.9 (2026-02-05)

3.1 New Features

  • bump django to 5.2.11 to fix high CVE 2026 1207, 1287 and 1312 (backport #701) (#702)

4. v2.3.8 (2025-12-16)

4.1 Bug Fixes

  • problem initializing php-fpm with multiple apps plugin (#699) (#700)

5. v2.3.7 (2025-12-04)

5.1 New Features

  • bump django to 5.2.9 to fix CVE-2025-13372 and CVE-2025-64460 (backport #696) (#697)

6. v2.3.6 (2025-11-07)

6.1 New Features

  • bump django >= 5.2.8 (fix CVE-2025-64458 and 64459) (backport #691) (#692)

7. v2.3.5 (2025-10-17)

7.1 New Features

  • bump django >= 5.2.7 (fix CVE-2025-57833) (#685) (#687)
  • add check_delay in circus arbiter config setting (backport #688) (#689)

8. v2.3.4 (2025-09-17)

8.1 New Features

  • force django >= 5.2.6 in plugin python3_django (CVE-2025-57833) (#682) (#683)

9. v2.3.3 (2025-09-05)

9.1 New Features

  • add comments to explain how to resolve setcap problems (#677) (#679)

10. v2.3.2 (2025-07-16)

  • No interesting change

11. v2.3.1 (2025-06-16)

11.1 New Features

  • bump django to 5.2.2 (to fix CVE-2025-48432) (backport #658) (#660)

12. v2.3.0 (2025-05-13)

12.1 New Features

  • rename template python3_django3 in python3_django with django4 (#612)
  • authorize django >=5 (ok with built-in sqlite 3.45 in layer core) (#616)
  • add support of the nginx port_in_redirect directive (#626)
  • add initscripts, make and crontab as dependencies (#628)
  • add plugin php (first version, from repository mfservplugin_php) (#645)
  • plugin PHP template (#649)
  • bump django to 5.0.13 in template django to fix CVE-2025-26699 (#650)
  • fallback to index.php script on / ended urls (#654)

12.2 Bug Fixes

  • requires django<5 (django 5 requires sqlite >= 3.27 not availabl… (#614)
  • stop plugins before nginx stop (#621)
  • fix vulnerabilites in django (CVE-2024-45231 and CVE-2024-45230) (#634)
  • enable the access log for the healthcheck endpoint (closes #1958) (#637)
  • bump django5 to 5.0.11 (CVE-2024-56374) (#644)
  • bump django5 to at least 5.0.14 (CVE-2025-27556) (#657)