1
0
forked from pool/python-Django
python-Django/Django-2.1.7.tar.gz
Thomas Bechtold a2706e4981 - update to 2.1.7 (CVE-2019-6975, bsc#1124991):
* Corrected packaging error from 2.1.6
  * Memory exhaustion in django.utils.numberformat.format()
    If django.utils.numberformat.format() – used by contrib.admin as well
    as the the floatformat, filesizeformat, and intcomma templates
    filters – received a Decimal with a large number of digits or a
    large exponent, it could lead to significant memory usage
    due to a call to '{:f}'.format().
    To avoid this, decimals with more than 200 digits are now formatted
    using scientific notation.
  * Made the obj argument of InlineModelAdmin.has_add_permission() optional
    to restore backwards compatibility with third-party code that doesn’t
    provide it

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:django/python-Django?expand=0&rev=20
2019-02-12 09:33:11 +00:00

4 lines
132 B
Plaintext

version https://git-lfs.github.com/spec/v1
oid sha256:939652e9d34d7d53d74d5d8ef82a19e5f8bb2de75618f7e5360691b6e9667963
size 8608548