  
  Versions affected
  ~~~~~~~~~~~~~~~~~
  
  * Django 0.96 :commit:`(patch) <da85d76fd6>`
  * Django 1.0 :commit:`(patch) <df7f917b7f>`
  
  September 2, 2008 - :cve:`2008-3909`
  ------------------------------------
  
  CSRF via preservation of POST data during admin login. `Full description
 
</s> remove * Django 0.95 :commit:`(patch) <50ce7fb57d>`
* Django 0.96 :commit:`(patch) <7791e5c050>`
 </s> add * Django 0.95 :commit:`(patch) <50ce7fb57d79e8940ccf6e2781f2f01df029b5c5>`
* Django 0.96 :commit:`(patch) <7791e5c050cebf86d868c5dab7092185b125fdc9>` </s> remove * Django 1.0 :commit:`(patch) <594a28a904>`
* Django 1.1 :commit:`(patch) <e3e992e18b>`
 </s> add * Django 1.0 :commit:`(patch) <594a28a9044120bed58671dde8a805c9e0f6c79a>`
* Django 1.1 :commit:`(patch) <e3e992e18b368fcd56aabafc1b5bf80a6e11b495>` </s> remove * Django 1.1 :commit:`(patch) <1966786d2d>`
* Django 1.2 :commit:`(patch) <1f814a9547>`
 </s> add * Django 1.1 :commit:`(patch) <1966786d2dde73e17f39cf340eb33fcb5d73904e>`
* Django 1.2 :commit:`(patch) <1f814a9547842dcfabdae09573055984af9d3fab>` </s> remove * Django 1.1 :commit:`(patch) <570a32a047>`
* Django 1.2 :commit:`(patch) <194566480b>`
 </s> add * Django 1.1 :commit:`(patch) <570a32a047ea56265646217264b0d3dab1a14dbd>`
* Django 1.2 :commit:`(patch) <194566480b15cf4e294d3f03ff587019b74044b2>` </s> remove * Django 1.2: :commit:`(patch) <7268f8af86>`
* Django 1.3: :commit:`(patch) <1a76dbefdf>`
 </s> add * Django 1.2: :commit:`(patch) <7268f8af86186518821d775c530d5558fd726930>`
* Django 1.3: :commit:`(patch) <1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0>`
* Django 0.96 :commit:`(patch) <da85d76fd6ca846f3b0ff414e042ddb5e62e2e69>`
* Django 1.0 :commit:`(patch) <df7f917b7f51ba969faa49d000ffc79572c5dcb4>`
  
  Versions affected
  ~~~~~~~~~~~~~~~~~
  
* Django 0.96 :commit:`(patch) <da85d76fd6ca846f3b0ff414e042ddb5e62e2e69>`
* Django 1.0 :commit:`(patch) <df7f917b7f51ba969faa49d000ffc79572c5dcb4>`
* Django 0.96 :commit:`(patch) <da85d76fd6ca846f3b0ff414e042ddb5e62e2e69>`
* Django 1.0 :commit:`(patch) <df7f917b7f51ba969faa49d000ffc79572c5dcb4>`
  
  September 2, 2008 - :cve:`2008-3909`
  ------------------------------------
  
  CSRF via preservation of POST data during admin login. `Full description
keep keep keep keep replace replace keep keep keep keep keep
 Refs #32720 -- Used full hashes in security archive. 
docs/releases/security.txt