Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:1767-1

Опубликовано: 23 мая 2024
Источник: suse-cvrf

Описание

Security update for python-sqlparse

This update for python-sqlparse fixes the following issues:

  • CVE-2024-4340: Catch RecursionError to avoid a denial of service. (bsc#1223603)

Список пакетов

SUSE Linux Enterprise Module for Public Cloud 15 SP4
python311-sqlparse-0.4.4-150400.6.7.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5
python311-sqlparse-0.4.4-150400.6.7.1
openSUSE Leap 15.5
python311-sqlparse-0.4.4-150400.6.7.1

Ссылки

Описание

Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 15 SP4:python311-sqlparse-0.4.4-150400.6.7.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5:python311-sqlparse-0.4.4-150400.6.7.1
openSUSE Leap 15.5:python311-sqlparse-0.4.4-150400.6.7.1
Ссылки