linux/meta-openembedded.git/meta-python/recipes-devtools/python/python3-sqlparse/CVE-2023-30608.patch, branch kirkstone-next Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=kirkstone-next 2023-06-17T17:50:19+00:00 python3-sqlparse: fix for CVE-2023-30608 2023-06-17T17:50:19+00:00 Narpat Mali narpat.mali@windriver.com 2023-05-31T15:23:13+00:00 urn:sha1:420acd8735dd5d3bd0751928b65b87b94ede2b0c sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to upgrade. There are no known workarounds for this issue. Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>