linux/meta-openembedded.git/meta-python/recipes-devtools/python/python3-sqlparse/CVE-2024-4340.patch, branch scarthgap-nextMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap-next2024-08-03T15:56:05+00:00python3-sqlparse: Fix CVE-2024-43402024-08-03T15:56:05+00:00Soumya Sambusoumya.sambu@windriver.com2024-07-26T12:04:24+00:00urn:sha1:cffdfd0d699829f5ee7a0a59a6573cc6ed2601c4
Passing a heavily nested list to sqlparse.parse() leads to a Denial
of Service due to RecursionError.
References:
https://nvd.nist.gov/vuln/detail/CVE-2024-4340
Upstream-patch:
https://github.com/andialbrecht/sqlparse/commit/b4a39d9850969b4e1d6940d32094ee0b42a2cf03
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>