Django 1.5 is finally insecure?

Question

I am django user and using 1.5 version and almost finish developing application. But I finally realized that whenever I read the documents of django 1.5 there is a banner on the top that 1.5 is insecure version.. Should I have to move to higher version?

Answer 1

The message is there because of the Django's release process philosophy:

The rule of thumb is that fixes will be backported to the last major release for bugs that would have prevented a release in the first place (release blockers).

Security fixes and data loss bugs will be applied to the current master, the last two major releases, and the current LTS release.

Since Django 1.7 is now got finally stable, current and new security problems would be fixed in 1.6, 1.7 and the latest LTS release 1.4. This is why 1.5 is considered "insecure".

---

There is also a related detailed article being posted this week:

• Django Versioning