UbuntuUpdates.org

Package "sqlformat"

Name: sqlformat

Description:

SQL formatting utility
Latest version: 0.4.4-1ubuntu0.1
Release: noble (24.04)
Level: updates
Repository: universe
Head package: sqlparse
Homepage: https://github.com/andialbrecht/sqlparse

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "sqlformat"

All arch deb package
APT INSTALL

Other versions of "sqlformat" in Noble

Repository Area Version
base universe 0.4.4-1
security universe 0.4.4-1ubuntu0.1
PPA: Postgresql 0.2.4-0.1~pgdg16.04+1

Changelog

Version: 0.4.4-1ubuntu0.1 2024-05-13 17:07:17 UTC

  sqlparse (0.4.4-1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2024-4340.patch: raise SQLParseError instead
      of RecursionError in sqlparse/sql.py, tests/test_regressions.py.
    - CVE-2024-4340

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 07 May 2024 09:47:27 -0300
CVE-2024-4340 Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.


About   -   Send Feedback to @ubuntu_updates