In accordance with our security release policy, the Django team is issuing multiple releases -- Django 1.7.11, 1.8.7, and 1.9 release candidate 2. These releases are now available on PyPI and our download page. These releases address a security issues detailed below. We encourage all users of Django to upgrade as soon as possible. The Django master branch has also been updated.

This is likely to be the last release of the 1.7 series as it will be end-of-life upon the release of Django 1.9, scheduled for December 1.

Per our supported versions policy , Django 1.6 and older are no longer receiving security updates.

Resolution

Patches have been applied to Django's master development branch and to the 1.7, 1.8, and 1.9 release branches, which resolve the issue described above. The patches may be obtained directly from the following changesets:

The following new releases have been issued:

The PGP key ID used for these releases is Tim Graham: 1E8ABDC773EDE252.