Copying everyone just so that you can see this, not necessarily because it blocks launch. We should update to Django 1.4.1, which provides some important security fixes: https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
FWIW, we do already have a bug to upgrade to Django 1.4. I don't have the bug # handy right now, though.
For bugs that are resolved, we remove the security flag. These haven't had their flag removed, so I'm removing it now.