Commit Graph

2 Commits

Author SHA1 Message Date
Carlton Gibson 83ab3e2664 [2.2.x] Fixed CVE-2019-6975 -- Fixed memory exhaustion in utils.numberformat.format().
Thanks Sjoerd Job Postmus for the report and initial patch.
Thanks Michael Manfre, Tim Graham, and Florian Apolloner for review.

Backport of 402c0caa85 from master
2019-02-11 11:10:38 +01:00
Carlton Gibson 941109ccb3 [2.2.x] Added stub release notes for security releases.
Backport of 5cc6f02f91 from master
2019-02-07 15:47:52 +01:00