mirror of https://github.com/django/django.git
Fixed typos in 1.11.19, 2.0.11, 2.1.6 release notes.
This commit is contained in:
parent
a387ef1117
commit
2ef6f209f7
|
@ -10,10 +10,9 @@ CVE-2019-6975: Memory exhaustion in ``django.utils.numberformat.format()``
|
||||||
--------------------------------------------------------------------------
|
--------------------------------------------------------------------------
|
||||||
|
|
||||||
If ``django.utils.numberformat.format()`` -- used by ``contrib.admin`` as well
|
If ``django.utils.numberformat.format()`` -- used by ``contrib.admin`` as well
|
||||||
as the the ``floatformat``, ``filesizeformat``, and ``intcomma`` templates
|
as the ``floatformat``, ``filesizeformat``, and ``intcomma`` templates filters
|
||||||
filters -- received a ``Decimal`` with a large number of digits or a large
|
-- received a ``Decimal`` with a large number of digits or a large exponent, it
|
||||||
exponent, it could lead to significant memory usage due to a call to
|
could lead to significant memory usage due to a call to ``'{:f}'.format()``.
|
||||||
``'{:f}'.format()``.
|
|
||||||
|
|
||||||
To avoid this, decimals with more than 200 digits are now formatted using
|
To avoid this, decimals with more than 200 digits are now formatted using
|
||||||
scientific notation.
|
scientific notation.
|
||||||
|
|
|
@ -10,10 +10,9 @@ CVE-2019-6975: Memory exhaustion in ``django.utils.numberformat.format()``
|
||||||
--------------------------------------------------------------------------
|
--------------------------------------------------------------------------
|
||||||
|
|
||||||
If ``django.utils.numberformat.format()`` -- used by ``contrib.admin`` as well
|
If ``django.utils.numberformat.format()`` -- used by ``contrib.admin`` as well
|
||||||
as the the ``floatformat``, ``filesizeformat``, and ``intcomma`` templates
|
as the ``floatformat``, ``filesizeformat``, and ``intcomma`` templates filters
|
||||||
filters -- received a ``Decimal`` with a large number of digits or a large
|
-- received a ``Decimal`` with a large number of digits or a large exponent, it
|
||||||
exponent, it could lead to significant memory usage due to a call to
|
could lead to significant memory usage due to a call to ``'{:f}'.format()``.
|
||||||
``'{:f}'.format()``.
|
|
||||||
|
|
||||||
To avoid this, decimals with more than 200 digits are now formatted using
|
To avoid this, decimals with more than 200 digits are now formatted using
|
||||||
scientific notation.
|
scientific notation.
|
||||||
|
|
|
@ -10,10 +10,9 @@ CVE-2019-6975: Memory exhaustion in ``django.utils.numberformat.format()``
|
||||||
--------------------------------------------------------------------------
|
--------------------------------------------------------------------------
|
||||||
|
|
||||||
If ``django.utils.numberformat.format()`` -- used by ``contrib.admin`` as well
|
If ``django.utils.numberformat.format()`` -- used by ``contrib.admin`` as well
|
||||||
as the the ``floatformat``, ``filesizeformat``, and ``intcomma`` templates
|
as the ``floatformat``, ``filesizeformat``, and ``intcomma`` templates filters
|
||||||
filters -- received a ``Decimal`` with a large number of digits or a large
|
-- received a ``Decimal`` with a large number of digits or a large exponent, it
|
||||||
exponent, it could lead to significant memory usage due to a call to
|
could lead to significant memory usage due to a call to ``'{:f}'.format()``.
|
||||||
``'{:f}'.format()``.
|
|
||||||
|
|
||||||
To avoid this, decimals with more than 200 digits are now formatted using
|
To avoid this, decimals with more than 200 digits are now formatted using
|
||||||
scientific notation.
|
scientific notation.
|
||||||
|
|
Loading…
Reference in New Issue