Django 2.2.11 release notesLink to this heading#

CVE-2020-9402: Potential SQL injection via tolerance parameter in GIS functions and aggregates on OracleLink to this heading#

GIS functions and aggregates on Oracle were subject to SQL injection, using a suitably crafted tolerance.

BugfixesLink to this heading#

• Fixed a data loss possibility in the select_for_update(). When using related fields or parent link fields with 複数テーブルの継承 in the of argument, the corresponding models were not locked (#31246).