diff options
| author | Narpat Mali <narpat.mali@windriver.com> | 2023-05-31 15:23:13 +0000 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2023-06-17 13:50:19 -0400 |
| commit | 420acd8735dd5d3bd0751928b65b87b94ede2b0c (patch) | |
| tree | b9ffd4bc3bbf0f629e868ab2a4f935e6b379992d /meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb | |
| parent | 9ea78f00a460d2c2f6e1cd49121e5e41eb2c68a4 (diff) | |
| download | meta-openembedded-420acd8735dd5d3bd0751928b65b87b94ede2b0c.tar.gz | |
python3-sqlparse: fix for CVE-2023-30608
sqlparse is a non-validating SQL parser module for Python. In affected
versions the SQL parser contains a regular expression that is vulnerable
to ReDoS (Regular Expression Denial of Service). This issue was introduced
by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS).
This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users
are advised to upgrade. There are no known workarounds for this issue.
Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb')
| -rw-r--r-- | meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb b/meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb index 0980ff9c24..b5cc41e730 100644 --- a/meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb +++ b/meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb | |||
| @@ -6,6 +6,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=2b136f573f5386001ea3b7b9016222fc" | |||
| 6 | 6 | ||
| 7 | SRC_URI += "file://0001-sqlparse-change-shebang-to-python3.patch \ | 7 | SRC_URI += "file://0001-sqlparse-change-shebang-to-python3.patch \ |
| 8 | file://run-ptest \ | 8 | file://run-ptest \ |
| 9 | file://CVE-2023-30608.patch \ | ||
| 9 | " | 10 | " |
| 10 | 11 | ||
| 11 | SRC_URI[sha256sum] = "0c00730c74263a94e5a9919ade150dfc3b19c574389985446148402998287dae" | 12 | SRC_URI[sha256sum] = "0c00730c74263a94e5a9919ade150dfc3b19c574389985446148402998287dae" |