Multiple vulnerabilities were found in sqlparse, a non-validating SQL parser for Python, which can lead to Denial of Service. CVE-2021-32839 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4000-1
SQL parse could be made to denial of service if it received a specially crafted input.. ========================================================================== Ubuntu Security Notice USN-6771-1 May 13, 2024 sqlparse vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 23.10 - Ubuntu 22.04 LTS Summary: SQL parse could be made to denial of service if it received a specially crafted input. Software Description: - sqlparse: documentation for non-validating SQL parser in Python Details: It was discovered that SQL parse incorrectly handled certain nested lists. An attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS python3-sqlparse 0.4.4-1ubuntu0.1 Ubuntu 23.10 python3-sqlparse 0.4.2-1ubuntu1.1 Ubuntu 22.04 LTS python3-sqlparse 0.4.2-1ubuntu0.22.04.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6771-1 CVE-2024-4340 Package Information: https://launchpad.net/ubuntu/+source/sqlparse/0.4.4-1ubuntu0.1 https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu1.1 https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu0.22.04.2 . Unveil Ubuntu Security Notice USN-6771-1 concerning sqlparse flaw potentially resulting in service disruption.. sqlparse Update, Ubuntu Vulnerability, Denial of Service Fix. . Severity: Critical. LinuxSecurity.com Team
Erik Krogh Kristensen discovered that sqlparse, a non-validating SQL parser, contained a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3425-1
SQL parse could be made to denial of service if it received a specially crafted regular expression.. =========================================================================Ubuntu Security Notice USN-6064-1 May 10, 2023 sqlparse vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: SQL parse could be made to denial of service if it received a specially crafted regular expression. Software Description: - sqlparse: documentation for non-validating SQL parser in Python Details: It was discovered that SQL parse incorrectly handled certain regular expression. An attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: python3-sqlparse 0.4.2-1ubuntu0.23.04.1 Ubuntu 22.10: python3-sqlparse 0.4.2-1ubuntu0.22.10.1 Ubuntu 22.04 LTS: python3-sqlparse 0.4.2-1ubuntu0.22.04.1 Ubuntu 20.04 LTS: python3-sqlparse 0.2.4-3ubuntu0.1 Ubuntu 18.04 LTS: python-sqlparse 0.2.4-0.1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6064-1 CVE-2023-30608 Package Information: https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu0.23.04.1 https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu0.22.10.1 https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu0.22.04.1 https://launchpad.net/ubuntu/+source/sqlparse/0.2.4-3ubuntu0.1 https://launchpad.net/ubuntu/+source/sqlparse/0.2.4-0.1ubuntu0.1 . Serious SQL syntax flaw on Ubuntu systems may result in service unavailability. Prompt updates advisable for safeguard.. sqlparse,vulnerability fix,system update,Ubuntu security,denial of service. .Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.