diff options
| author | Narpat Mali <narpat.mali@windriver.com> | 2023-05-31 15:23:13 +0000 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2023-06-17 13:50:19 -0400 |
| commit | 420acd8735dd5d3bd0751928b65b87b94ede2b0c (patch) | |
| tree | b9ffd4bc3bbf0f629e868ab2a4f935e6b379992d /meta-python/recipes-devtools/python/python3-sqlparse/0001-sqlparse-change-shebang-to-python3.patch | |
| parent | 9ea78f00a460d2c2f6e1cd49121e5e41eb2c68a4 (diff) | |
| download | meta-openembedded-420acd8735dd5d3bd0751928b65b87b94ede2b0c.tar.gz | |
python3-sqlparse: fix for CVE-2023-30608
sqlparse is a non-validating SQL parser module for Python. In affected
versions the SQL parser contains a regular expression that is vulnerable
to ReDoS (Regular Expression Denial of Service). This issue was introduced
by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS).
This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users
are advised to upgrade. There are no known workarounds for this issue.
Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-sqlparse/0001-sqlparse-change-shebang-to-python3.patch')
0 files changed, 0 insertions, 0 deletions