Advisories » MGASA-2019-0350

Updated python-sqlalchemy packages fix security vulnerabilities

Publication date: 30 Nov 2019
Modification date: 30 Nov 2019
Type: security
Affected Mageia releases : 7
CVE: CVE-2019-7164 , CVE-2019-7548

Description

Updated python-sqlalchemy packages fix security vulnerabilities:

SQL Injection via the order_by parameter (CVE-2019-7164).

SQL Injection via the group_by parameter (CVE-2019-7548).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=25763
• https://lists.opensuse.org/opensuse-updates/2019-08/msg00221.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7164
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7548

SRPMS

7/core

• python-sqlalchemy-1.2.19-1.mga7