{"title":"Django 4.1.2 release notes","version":"dev","locale":"en","docname":"releases/4.1.2","url":"/en/dev/releases/4.1.2/","canonical":"https://djangodocs.dev/en/dev/releases/4.1.2/","summary":"Django 4.1.2 fixes a security issue with severity “medium” and several bugs in 4.1.1.","html":"<h1>Django 4.1.2 release notes<a class=\"heading-anchor\" href=\"#django-4-1-2-release-notes\"><span class=\"visually-hidden\">Link to this heading</span><span aria-hidden=\"true\">#</span></a></h1>\n<p><em>October 4, 2022</em></p>\n<p>Django 4.1.2 fixes a security issue with severity “medium” and several bugs in\n4.1.1.</p>\n<section id=\"cve-2022-41323-potential-denial-of-service-vulnerability-in-internationalized-urls\">\n<h2>CVE-2022-41323: Potential denial-of-service vulnerability in internationalized URLs<a class=\"heading-anchor\" href=\"#cve-2022-41323-potential-denial-of-service-vulnerability-in-internationalized-urls\"><span class=\"visually-hidden\">Link to this heading</span><span aria-hidden=\"true\">#</span></a></h2>\n<p>Internationalized URLs were subject to potential denial of service attack via\nthe locale parameter.</p>\n</section>\n<section id=\"bugfixes\">\n<h2>Bugfixes<a class=\"heading-anchor\" href=\"#bugfixes\"><span class=\"visually-hidden\">Link to this heading</span><span aria-hidden=\"true\">#</span></a></h2>\n<ul class=\"simple\">\n<li><p>Fixed a regression in Django 4.1 that caused a migration crash on PostgreSQL\nwhen adding a model with <code class=\"docutils literal notranslate\">ExclusionConstraint</code> (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/33982\">#33982</a>).</p></li>\n<li><p>Fixed a regression in Django 4.1 that caused aggregation over a queryset that\ncontained an <code class=\"docutils literal notranslate\">Exists</code> annotation to crash due to too many selected columns\n(<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/33992\">#33992</a>).</p></li>\n<li><p>Fixed a bug in Django 4.1 that caused an incorrect validation of\n<code class=\"docutils literal notranslate\">CheckConstraint</code> on <code class=\"docutils literal notranslate\">NULL</code> values (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/33996\">#33996</a>).</p></li>\n<li><p>Fixed a regression in Django 4.1 that caused a\n<code class=\"docutils literal notranslate\">QuerySet.values()/values_list()</code> crash on <code class=\"docutils literal notranslate\">ArrayAgg()</code> and\n<code class=\"docutils literal notranslate\">JSONBAgg()</code> (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/34016\">#34016</a>).</p></li>\n<li><p>Fixed a bug in Django 4.1 that caused <a class=\"reference internal\" href=\"/en/dev/ref/contrib/admin/#django.contrib.admin.ModelAdmin.autocomplete_fields\" title=\"django.contrib.admin.ModelAdmin.autocomplete_fields\"><code class=\"xref py py-attr docutils literal notranslate\">ModelAdmin.autocomplete_fields</code></a>\nto be incorrectly selected after adding/changing related instances via popups\n(<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/34025\">#34025</a>).</p></li>\n<li><p>Fixed a regression in Django 4.1 where the app registry was not populated\nwhen running parallel tests with the <code class=\"docutils literal notranslate\">multiprocessing</code> start method\n<code class=\"docutils literal notranslate\">spawn</code> (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/34010\">#34010</a>).</p></li>\n<li><p>Fixed a regression in Django 4.1 where the <code class=\"docutils literal notranslate\">--debug-mode</code> argument to\n<code class=\"docutils literal notranslate\">test</code> did not work when running parallel tests with the\n<code class=\"docutils literal notranslate\">multiprocessing</code> start method <code class=\"docutils literal notranslate\">spawn</code> (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/34010\">#34010</a>).</p></li>\n<li><p>Fixed a regression in Django 4.1 that didn’t alter a sequence type when\naltering type of pre-Django 4.1 serial columns on PostgreSQL\n(<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/34058\">#34058</a>).</p></li>\n<li><p>Fixed a regression in Django 4.1 that caused a crash for <a class=\"reference internal\" href=\"/en/dev/ref/class-based-views/flattened-index/#View\" title=\"View\"><code class=\"xref py py-class docutils literal notranslate\">View</code></a>\nsubclasses with asynchronous handlers when handling non-allowed HTTP methods\n(<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/34062\">#34062</a>).</p></li>\n<li><p>Reverted caching related managers for <code class=\"docutils literal notranslate\">ForeignKey</code>, <code class=\"docutils literal notranslate\">ManyToManyField</code>,\nand <code class=\"docutils literal notranslate\">GenericRelation</code> that caused the incorrect refreshing of related\nobjects (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/33984\">#33984</a>).</p></li>\n<li><p>Relaxed the system check added in Django 4.1 for the same name used for\nmultiple template tag modules to a warning (<a class=\"extlink-ticket reference external\" href=\"https://code.djangoproject.com/ticket/32987\">#32987</a>).</p></li>\n</ul>\n</section>","rootId":"django-4-1-2-release-notes","toc":[{"title":"CVE-2022-41323: Potential denial-of-service vulnerability in internationalized URLs","anchor":"cve-2022-41323-potential-denial-of-service-vulnerability-in-internationalized-urls","children":[]},{"title":"Bugfixes","anchor":"bugfixes","children":[]}],"breadcrumbs":[{"docname":"releases/index","title":"Release notes","url":"/en/dev/releases/"}],"prev":{"docname":"releases/4.1.3","title":"Django 4.1.3 release notes","url":"/en/dev/releases/4.1.3/"},"next":{"docname":"releases/4.1.1","title":"Django 4.1.1 release notes","url":"/en/dev/releases/4.1.1/"},"formats":{"html":"/en/dev/releases/4.1.2/","markdown":"/en/dev/releases/4.1.2.md","json":"/en/dev/releases/4.1.2.json"},"source":"https://github.com/django/django/blob/main/docs/releases/4.1.2.txt","official":"https://docs.djangoproject.com/en/dev/releases/4.1.2/","inVersions":["dev","6.1","6.0","5.2","5.1","5.0","4.2","4.1"],"inLocales":["en"]}