diff options
author | Soumya Sambu <soumya.sambu@windriver.com> | 2024-07-26 12:04:24 +0000 |
---|---|---|
committer | Armin Kuster <akuster808@gmail.com> | 2024-08-03 11:56:05 -0400 |
commit | cffdfd0d699829f5ee7a0a59a6573cc6ed2601c4 (patch) | |
tree | 96d9d0a5cbe53ff058e73bec5bf1512639a83448 /meta-python/recipes-devtools/python/python3-sqlparse/0001-sqlparse-change-shebang-to-python3.patch | |
parent | 9edbfe9826a58370a834a2a3bc2025698e52b184 (diff) | |
download | meta-openembedded-cffdfd0d699829f5ee7a0a59a6573cc6ed2601c4.tar.gz |
python3-sqlparse: Fix CVE-2024-4340
Passing a heavily nested list to sqlparse.parse() leads to a Denial
of Service due to RecursionError.
References:
https://nvd.nist.gov/vuln/detail/CVE-2024-4340
Upstream-patch:
https://github.com/andialbrecht/sqlparse/commit/b4a39d9850969b4e1d6940d32094ee0b42a2cf03
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-sqlparse/0001-sqlparse-change-shebang-to-python3.patch')
0 files changed, 0 insertions, 0 deletions