Django 1.2.7 released
Yesterday's security disclosure included a release -- Django 1.2.6 -- from the Django 1.2 release branch. Although the release branch itself, and the 1.2.6 release tag in the Django repository, both contain the patches for the security issues, it has come to our attention that the release package itself was missing at least some of those patches.
To remedy this, we are immediately issuing Django 1.2.7, which is simply the (correct, as it includes all security patches) state of the current 1.2 release branch. All users of the Django 1.2 series are urged to upgrade immediately.
To obtain Django 1.2.7:
We apologize for any inconvenience caused by this issue.
Posted by James Bennett on September 10, 2011