SUSE-SU-2019:2042-1

Fixed CVE-2019-6975 (bsc#1124991)
- Added CVE-2019-6975.patch to fix uncontrolled memory consumption
- If django.utils.numberformat.format() -- used by contrib.admin as well as the the floatformat, filesizeformat, and intcomma templates filters -- received a Decimal with a large number of digits or a large exponent, it could lead to significant memory usage due to a call to '{:f}'.format(). To avoid this, decimals with more than 200 digits are now formatted using scientific notation.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.19-3.12.5

{
    "binaries": [
        {
            "python-Django": "1.8.19-3.12.5"
        }
    ]
}