diff options
| author | Soumya Sambu <soumya.sambu@windriver.com> | 2025-01-20 04:32:33 +0000 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2025-01-22 19:29:37 -0500 |
| commit | de8681b4a2a101b99dd2c48d89a7de2ccd9a961f (patch) | |
| tree | b640224346a887e1cd28c7e2b260b034bf9bcce6 /meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb | |
| parent | c028b3652715600a0bed43314c4f1b53d7e0181e (diff) | |
| download | meta-openembedded-de8681b4a2a101b99dd2c48d89a7de2ccd9a961f.tar.gz | |
python3-sqlparse: Fix CVE-2024-4340
Passing a heavily nested list to sqlparse.parse() leads to a Denial
of Service due to RecursionError.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-4340
Upstream-patch:
https://github.com/andialbrecht/sqlparse/commit/b4a39d9850969b4e1d6940d32094ee0b42a2cf03
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb')
| -rw-r--r-- | meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb b/meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb index b5cc41e730..80f37b1368 100644 --- a/meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb +++ b/meta-python/recipes-devtools/python/python3-sqlparse_0.4.2.bb | |||
| @@ -7,6 +7,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=2b136f573f5386001ea3b7b9016222fc" | |||
| 7 | SRC_URI += "file://0001-sqlparse-change-shebang-to-python3.patch \ | 7 | SRC_URI += "file://0001-sqlparse-change-shebang-to-python3.patch \ |
| 8 | file://run-ptest \ | 8 | file://run-ptest \ |
| 9 | file://CVE-2023-30608.patch \ | 9 | file://CVE-2023-30608.patch \ |
| 10 | file://CVE-2024-4340.patch \ | ||
| 10 | " | 11 | " |
| 11 | 12 | ||
| 12 | SRC_URI[sha256sum] = "0c00730c74263a94e5a9919ade150dfc3b19c574389985446148402998287dae" | 13 | SRC_URI[sha256sum] = "0c00730c74263a94e5a9919ade150dfc3b19c574389985446148402998287dae" |