{"title":"Django 1.9.5 release notes","version":"dev","locale":"en","docname":"releases/1.9.5","url":"/en/dev/releases/1.9.5/","canonical":"https://djangodocs.dev/en/dev/releases/1.9.5/","summary":"Django 1.9.5 fixes several bugs in 1.9.4. Made MultiPartParser ignore filenames that normalize to an empty string to fix crash in MemoryFileUploadHandler on…","html":"<h1>Django 1.9.5 release notes<a class=\"heading-anchor\" href=\"#django-1-9-5-release-notes\"><span class=\"visually-hidden\">Link to this heading</span><span aria-hidden=\"true\">#</span></a></h1>\n<p><em>April 1, 2016</em></p>\n<p>Django 1.9.5 fixes several bugs in 1.9.4.</p>\n<section id=\"bugfixes\">\n<h2>Bugfixes<a class=\"heading-anchor\" href=\"#bugfixes\"><span class=\"visually-hidden\">Link to this heading</span><span aria-hidden=\"true\">#</span></a></h2>\n<ul class=\"simple\">\n<li><p>Made <code class=\"docutils literal notranslate\">MultiPartParser</code> ignore filenames that normalize to an empty string\nto fix crash in <code class=\"docutils literal notranslate\">MemoryFileUploadHandler</code> on specially crafted user input\n(<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26325\">#26325</a>).</p></li>\n<li><p>Fixed a race condition in <code class=\"docutils literal notranslate\">BaseCache.get_or_set()</code> (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26332\">#26332</a>). It\nnow returns the <code class=\"docutils literal notranslate\">default</code> value instead of <code class=\"docutils literal notranslate\">False</code> if there’s an error\nwhen trying to add the value to the cache.</p></li>\n<li><p>Fixed data loss on SQLite where <code class=\"docutils literal notranslate\">DurationField</code> values with fractional\nseconds could be saved as <code class=\"docutils literal notranslate\">None</code> (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26324\">#26324</a>).</p></li>\n<li><p>The forms in <code class=\"docutils literal notranslate\">contrib.auth</code> no longer strip trailing and leading whitespace\nfrom the password fields (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26334\">#26334</a>). The change requires users who set\ntheir password to something with such whitespace after a site updated to\nDjango 1.9 to reset their password. It provides backwards-compatibility for\nearlier versions of Django.</p></li>\n<li><p>Fixed a memory leak in the cached template loader (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26306\">#26306</a>).</p></li>\n<li><p>Fixed a regression that caused <code class=\"docutils literal notranslate\">collectstatic --clear</code> to fail if the\nstorage doesn’t implement <code class=\"docutils literal notranslate\">path()</code> (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26297\">#26297</a>).</p></li>\n<li><p>Fixed a crash when using a reverse lookup with a subquery when a\n<code class=\"docutils literal notranslate\">ForeignKey</code> has a <code class=\"docutils literal notranslate\">to_field</code> set to something other than the primary key\n(<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26373\">#26373</a>).</p></li>\n<li><p>Fixed a regression in <code class=\"docutils literal notranslate\">CommonMiddleware</code> that caused spurious warnings in\nlogs on requests missing a trailing slash (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26293\">#26293</a>).</p></li>\n<li><p>Restored the functionality of the admin’s <code class=\"docutils literal notranslate\">raw_id_fields</code> in\n<code class=\"docutils literal notranslate\">list_editable</code> (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26387\">#26387</a>).</p></li>\n<li><p>Fixed a regression with abstract model inheritance and explicit parent links\n(<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26413\">#26413</a>).</p></li>\n<li><p>Fixed a migrations crash on SQLite when renaming the primary key of a model\ncontaining a <code class=\"docutils literal notranslate\">ForeignKey</code> to <code class=\"docutils literal notranslate\">'self'</code> (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/26384\">#26384</a>).</p></li>\n<li><p>Fixed <code class=\"docutils literal notranslate\">JSONField</code> inadvertently escaping its contents when displaying\nvalues after failed form validation (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/25532\">#25532</a>).</p></li>\n</ul>\n</section>","rootId":"django-1-9-5-release-notes","toc":[{"title":"Bugfixes","anchor":"bugfixes","children":[]}],"breadcrumbs":[{"docname":"releases/index","title":"Release notes","url":"/en/dev/releases/"}],"prev":{"docname":"releases/1.9.6","title":"Django 1.9.6 release notes","url":"/en/dev/releases/1.9.6/"},"next":{"docname":"releases/1.9.4","title":"Django 1.9.4 release notes","url":"/en/dev/releases/1.9.4/"},"formats":{"html":"/en/dev/releases/1.9.5/","markdown":"/en/dev/releases/1.9.5.md","json":"/en/dev/releases/1.9.5.json"},"source":"https://github.com/django/django/blob/main/docs/releases/1.9.5.txt","official":"https://docs.djangoproject.com/en/dev/releases/1.9.5/","inVersions":["dev","6.1","6.0","5.2","5.1","5.0","4.2","4.1","4.0","3.2","3.1","3.0","2.2","2.1","2.0","1.11","1.10","1.9"],"inLocales":["en"]}