1. ============================
    
  2. Django 1.11.29 release notes
    
  3. ============================
    
  4. 
    
  5. *March 4, 2020*
    
  6. 
    
  7. Django 1.11.29 fixes a security issue in 1.11.28.
    
  8. 
    
  9. CVE-2020-9402: Potential SQL injection via ``tolerance`` parameter in GIS functions and aggregates on Oracle
    
  10. ============================================================================================================
    
  11. 
    
  12. GIS functions and aggregates on Oracle were subject to SQL injection,
    
  13. using a suitably crafted ``tolerance``.