Package: python-sql / 1.4.0-1+deb12u1

Metadata

Package Version Patches format
python-sql 1.4.0-1+deb12u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
01 escape_non_expressions.patch | (download)

sql/operators.py | 3 2 + 1 - 0 !
sql/tests/test_operators.py | 4 4 + 0 - 0 !
2 files changed, 6 insertions(+), 1 deletion(-)

 escape non expressions for unary operators
 This patch fixes the vulnerability for SQL injection attacks
 from
 https://discuss.tryton.org/t/security-release-for-issue-93