UbuntuUpdates.org

Package "sqlformat"

Name: sqlformat

Description:

SQL formatting utility
Latest version: 0.4.2-1ubuntu0.22.04.2
Release: jammy (22.04)
Level: security
Repository: universe
Head package: sqlparse
Homepage: https://github.com/andialbrecht/sqlparse

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "sqlformat"

All arch deb package
APT INSTALL

Other versions of "sqlformat" in Jammy

Repository Area Version
base universe 0.4.2-1
updates universe 0.4.2-1ubuntu0.22.04.2
PPA: Postgresql 0.2.4-0.1~pgdg16.04+1

Changelog

Version: 0.4.2-1ubuntu0.22.04.2 2024-05-13 15:06:58 UTC

  sqlparse (0.4.2-1ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2024-4340.patch: raise SQLParseError instead
      of RecursionError in sqlparse/sql.py, tests/test_regressions.py.
    - CVE-2024-4340

 -- Leonidas Da Silva Barbosa <email address hidden> Wed, 08 May 2024 10:18:32 -0300
Source diff to previous version
CVE-2024-4340 Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

Version: 0.4.2-1ubuntu0.22.04.1 2023-05-10 14:07:32 UTC

  sqlparse (0.4.2-1ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: ReDoS
    - debian/patches/CVE-2023-30608.patch: remove unnecessary parts
      in regex for bad escaping in sqlparse/keywords.py.
    - CVE-2023-30608

 -- Leonidas Da Silva Barbosa <email address hidden> Thu, 04 May 2023 09:58:06 -0300


About   -   Send Feedback to @ubuntu_updates