Django 1.5终于不安全了?

时间:2021-02-03 19:24:12

I am django user and using 1.5 version and almost finish developing application. But I finally realized that whenever I read the documents of django 1.5 there is a banner on the top that 1.5 is insecure version.. Should I have to move to higher version?

我是django用户并使用1.5版本,几乎完成开发应用程序。但我终于意识到,每当我阅读django 1.5的文档时,顶部都有一个横幅,1.5是不安全的版本..我是否应该转向更高版本?

1 个解决方案

#1


10  

The message is there because of the Django's release process philosophy:

由于Django的发布流程理念,因此存在这样的信息:

The rule of thumb is that fixes will be backported to the last major release for bugs that would have prevented a release in the first place (release blockers).

根据经验,修复程序将被反向移植到最后一个主要版本,以防止首先阻止释放的错误(释放阻止程序)。

Security fixes and data loss bugs will be applied to the current master, the last two major releases, and the current LTS release.

安全修复程序和数据丢失错误将应用于当前主数据库,最后两个主要版本以及当前的LTS版本。

Since Django 1.7 is now got finally stable, current and new security problems would be fixed in 1.6, 1.7 and the latest LTS release 1.4. This is why 1.5 is considered "insecure".

由于Django 1.7现在最终稳定,当前和新的安全问题将在1.6,1.7和最新的LTS版本1.4中得到修复。这就是为什么1.5被认为是“不安全”的原因。


There is also a related detailed article being posted this week:

本周还有一篇相关的详细文章:

#1


10  

The message is there because of the Django's release process philosophy:

由于Django的发布流程理念,因此存在这样的信息:

The rule of thumb is that fixes will be backported to the last major release for bugs that would have prevented a release in the first place (release blockers).

根据经验,修复程序将被反向移植到最后一个主要版本,以防止首先阻止释放的错误(释放阻止程序)。

Security fixes and data loss bugs will be applied to the current master, the last two major releases, and the current LTS release.

安全修复程序和数据丢失错误将应用于当前主数据库,最后两个主要版本以及当前的LTS版本。

Since Django 1.7 is now got finally stable, current and new security problems would be fixed in 1.6, 1.7 and the latest LTS release 1.4. This is why 1.5 is considered "insecure".

由于Django 1.7现在最终稳定,当前和新的安全问题将在1.6,1.7和最新的LTS版本1.4中得到修复。这就是为什么1.5被认为是“不安全”的原因。


There is also a related detailed article being posted this week:

本周还有一篇相关的详细文章: