mirror of
https://github.com/django/django.git
synced 2024-12-23 01:25:58 +00:00
47 lines
1.8 KiB
Plaintext
47 lines
1.8 KiB
Plaintext
==========================
|
|
Django 5.0.8 release notes
|
|
==========================
|
|
|
|
*August 6, 2024*
|
|
|
|
Django 5.0.8 fixes three security issues with severity "moderate", one security
|
|
issue with severity "high", and several bugs in 5.0.7.
|
|
|
|
CVE-2024-41989: Memory exhaustion in ``django.utils.numberformat.floatformat()``
|
|
================================================================================
|
|
|
|
If :tfilter:`floatformat` received a string representation of a number in
|
|
scientific notation with a large exponent, it could lead to significant memory
|
|
consumption.
|
|
|
|
To avoid this, decimals with more than 200 digits are now returned as is.
|
|
|
|
Bugfixes
|
|
========
|
|
|
|
* Added missing validation for ``UniqueConstraint(nulls_distinct=False)`` when
|
|
using ``*expressions`` (:ticket:`35594`).
|
|
|
|
* Fixed a regression in Django 5.0 where ``ModelAdmin.action_checkbox`` could
|
|
break the admin changelist HTML page when rendering a model instance with a
|
|
``__html__`` method (:ticket:`35606`).
|
|
|
|
* Fixed a crash when creating a model with a ``Field.db_default`` and a
|
|
``Meta.constraints`` constraint composed of ``__endswith``, ``__startswith``,
|
|
or ``__contains`` lookups (:ticket:`35625`).
|
|
|
|
* Fixed a regression in Django 5.0.7 that caused a crash in
|
|
``LocaleMiddleware`` when processing a language code over 500 characters
|
|
(:ticket:`35627`).
|
|
|
|
* Fixed a bug in Django 5.0 that caused a system check crash when
|
|
``ModelAdmin.date_hierarchy`` was a ``GeneratedField`` with an
|
|
``output_field`` of ``DateField`` or ``DateTimeField`` (:ticket:`35628`).
|
|
|
|
* Fixed a bug in Django 5.0 which caused constraint validation to either crash
|
|
or incorrectly raise validation errors for constraints referring to fields
|
|
using ``Field.db_default`` (:ticket:`35638`).
|
|
|
|
* Fixed a crash in Django 5.0 when saving a model containing a ``FileField``
|
|
with a ``db_default`` set (:ticket:`35657`).
|