From d6e5aad5c7eba3d8061c09902de16cd2b22619af Mon Sep 17 00:00:00 2001 From: Tim Graham Date: Mon, 11 Feb 2019 16:08:50 -0500 Subject: [PATCH] Added CVE-2019-6975 to the security release archive. --- docs/releases/security.txt | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/docs/releases/security.txt b/docs/releases/security.txt index d62ebd96df..cce666ce99 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -922,3 +922,17 @@ Versions affected * Django 2.1 :commit:`(patch) <64d2396e83aedba3fcc84ca40f23fbd22f0b9b5b>` * Django 2.0 :commit:`(patch) <9f4ed7c94c62e21644ef5115e393ac426b886f2e>` * Django 1.11 :commit:`(patch) <1cd00fcf52d089ef0fe03beabd05d59df8ea052a>` + +February 11, 2019 - :cve:`2019-6975` +------------------------------------ + +Memory exhaustion in ``django.utils.numberformat.format()``. `Full description +`__ + +Versions affected +~~~~~~~~~~~~~~~~~ + +* Django 2.1 :commit:`(patch) <40cd19055773705301c3428ed5e08a036d2091f3>` +* Django 2.0 :commit:`(patch <1f42f82566c9d2d73aff1c42790d6b1b243f7676>` and + :commit:`correction) <392e040647403fc8007708d52ce01d915b014849>` +* Django 1.11 :commit:`(patch) <0bbb560183fabf0533289700845dafa94951f227>`