Alerts This Week
Warning Icon 1 697
Alerts This Week
Warning Icon 1 697

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":547,"type":"x","order":1,"pct":78.48,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.88,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.34,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
197

Debian 11: DLA-4000-1 high: sqlparse Denial of Service risks

Multiple vulnerabilities were found in sqlparse, a non-validating SQL parser for Python, which can lead to Denial of Service. CVE-2021-32839 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4000-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Guilhem Moulin December 21, 2024 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : sqlparse Version : 0.4.1-1+deb11u1 CVE ID : CVE-2021-32839 CVE-2023-30608 CVE-2024-4340 Debian Bug : 994841 1034615 1070148 Multiple vulnerabilities were found in sqlparse, a non-validating SQL parser for Python, which can lead to Denial of Service. CVE-2021-32839 Erik Krogh Kristensen discovered that the StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service). The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments. CVE-2023-30608 Erik Krogh Kristensen discovered that the Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service). CVE-2024-4340 Uriya Yavniely discovered that passing a heavily nested list to sqlparse.parse() may raise a RecursionError exception. A generic SQLParseError is now raised instead. For Debian 11 bullseye, these problems have been fixed in version 0.4.1-1+deb11u1. We recommend that you upgrade your sqlparse packages. For the detailed security status of sqlparse please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/sqlparse Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu LTS USN-5000-2 resolves multiple vulnerabilities in sqlparseaffecting Python applications, resulting in potential Denial of Service.. sqlparse security, Debian updates, Python parser vulnerabilities, Denial of Service. . LinuxSecurity.com Team

Calendar 2 Dec 21, 2024 Debian LTS
172

Ubuntu 24.04 LTS USN-6771-1 Critical: Sqlparse Denial of Service

SQL parse could be made to denial of service if it received a specially crafted input.. ========================================================================== Ubuntu Security Notice USN-6771-1 May 13, 2024 sqlparse vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 23.10 - Ubuntu 22.04 LTS Summary: SQL parse could be made to denial of service if it received a specially crafted input. Software Description: - sqlparse: documentation for non-validating SQL parser in Python Details: It was discovered that SQL parse incorrectly handled certain nested lists. An attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS python3-sqlparse 0.4.4-1ubuntu0.1 Ubuntu 23.10 python3-sqlparse 0.4.2-1ubuntu1.1 Ubuntu 22.04 LTS python3-sqlparse 0.4.2-1ubuntu0.22.04.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6771-1 CVE-2024-4340 Package Information: https://launchpad.net/ubuntu/+source/sqlparse/0.4.4-1ubuntu0.1 https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu1.1 https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu0.22.04.2 . Unveil Ubuntu Security Notice USN-6771-1 concerning sqlparse flaw potentially resulting in service disruption.. sqlparse Update, Ubuntu Vulnerability, Denial of Service Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 13, 2024 Critical Ubuntu
197

Debian 10: DLA-3425-1 Moderate: CVE-2023-30608 ReDoS in sqlparse

Erik Krogh Kristensen discovered that sqlparse, a non-validating SQL parser, contained a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3425-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Guilhem Moulin May 16, 2023 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : sqlparse Version : 0.2.4-1+deb10u1 CVE ID : CVE-2023-30608 Debian Bug : 1034615 Erik Krogh Kristensen discovered that sqlparse, a non-validating SQL parser, contained a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). For Debian 10 buster, this problem has been fixed in version 0.2.4-1+deb10u1. We recommend that you upgrade your sqlparse packages. For the detailed security status of sqlparse please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/sqlparse Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance your sqlparse library to address the ReDoS vulnerability outlined in Debian LTS DLA-3425-1. Crucial security notice information.. sqlparse security, Debian LTS advisory, ReDoS vulnerability. . Severity: Important. LinuxSecurity.com Team

Calendar 2 May 16, 2023 Important Debian LTS
172

Ubuntu 23.04 USN-6064-1 Critical: SQL Parse Denial of Service

SQL parse could be made to denial of service if it received a specially crafted regular expression.. =========================================================================Ubuntu Security Notice USN-6064-1 May 10, 2023 sqlparse vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: SQL parse could be made to denial of service if it received a specially crafted regular expression. Software Description: - sqlparse: documentation for non-validating SQL parser in Python Details: It was discovered that SQL parse incorrectly handled certain regular expression. An attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: python3-sqlparse 0.4.2-1ubuntu0.23.04.1 Ubuntu 22.10: python3-sqlparse 0.4.2-1ubuntu0.22.10.1 Ubuntu 22.04 LTS: python3-sqlparse 0.4.2-1ubuntu0.22.04.1 Ubuntu 20.04 LTS: python3-sqlparse 0.2.4-3ubuntu0.1 Ubuntu 18.04 LTS: python-sqlparse 0.2.4-0.1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6064-1 CVE-2023-30608 Package Information: https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu0.23.04.1 https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu0.22.10.1 https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu0.22.04.1 https://launchpad.net/ubuntu/+source/sqlparse/0.2.4-3ubuntu0.1 https://launchpad.net/ubuntu/+source/sqlparse/0.2.4-0.1ubuntu0.1 . Serious SQL syntax flaw on Ubuntu systems may result in service unavailability. Prompt updates advisable for safeguard.. sqlparse,vulnerability fix,system update,Ubuntu security,denial of service. .Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 10, 2023 Critical Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":547,"type":"x","order":1,"pct":78.48,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.88,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.34,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here