mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-11-04 02:31:21 +00:00
python3-sqlparse: Fix CVE-2024-4340
Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. References: https://nvd.nist.gov/vuln/detail/CVE-2024-4340 Upstream-patch: https://github.com/andialbrecht/sqlparse/commit/b4a39d9850969b4e1d6940d32094ee0b42a2cf03 Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
1 parent
9edbfe9826
commit
cffdfd0d69
2 files changed
+49
No files matched your search
@@ -5,6 +5,7 @@ LICENSE = "BSD-3-Clause"
|
||||
LIC_FILES_CHKSUM = "file://LICENSE;md5=2b136f573f5386001ea3b7b9016222fc"
|
||||
|
||||
SRC_URI += "file://0001-sqlparse-change-shebang-to-python3.patch \
|
||||
file://CVE-2024-4340.patch \
|
||||
file://run-ptest \
|
||||
"
|
||||
|
||||
|
||||
Reference in new issue
Block a user