Advisories » MGASA-2024-0185

Updated python-sqlparse packages fix security vulnerability

Publication date: 21 May 2024
Modification date: 21 May 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-4340

Description

Passing a heavily nested list to sqlparse.parse() leads to a Denial of
Service due to RecursionError.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=33210
• https://ubuntu.com/security/notices/USN-6771-1
• https://github.com/advisories/GHSA-2m57-hf25-phgg
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4340

SRPMS

9/core

• python-sqlparse-0.4.4-1.1.mga9