Описание
Security update for python-SQLAlchemy
This update for python-SQLAlchemy fixes the following issues:
Security issues fixed:
- CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593).
- CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593).
Список пакетов
SUSE Linux Enterprise Module for Package Hub 15 SP1
python2-SQLAlchemy-1.2.14-6.3.1
Ссылки
- Link for SUSE-SU-2019:2253-2
- E-Mail link for SUSE-SU-2019:2253-2
- SUSE Security Ratings
- SUSE Bug 1124593
- SUSE CVE CVE-2019-7164 page
- SUSE CVE CVE-2019-7548 page
Описание
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP1:python2-SQLAlchemy-1.2.14-6.3.1
Ссылки
- CVE-2019-7164
- SUSE Bug 1124593
Описание
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP1:python2-SQLAlchemy-1.2.14-6.3.1
Ссылки
- CVE-2019-7548
- SUSE Bug 1124593