USN-6771-1: SQL parse vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2024-4340
• https://launchpad.net/ubuntu/+source/sqlparse/0.4.4-1ubuntu0.1
• https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu1.1
• https://launchpad.net/ubuntu/+source/sqlparse/0.4.2-1ubuntu0.22.04.2
• https://ubuntu.com/security/notices/USN-6771-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2024-4340

Frequently Asked Questions

• What is the severity of USN-6771-1?

  The severity of USN-6771-1 is categorized as a potential denial of service vulnerability.

• How do I fix USN-6771-1?

  To fix USN-6771-1, update the python3-sqlparse package to the latest version available for your Ubuntu release.

• Which versions of Ubuntu are affected by USN-6771-1?

  USN-6771-1 affects Ubuntu versions 24.04, 23.10, and 22.04 that have specific vulnerable versions of python3-sqlparse.

• What is the vulnerability caused by USN-6771-1?

  USN-6771-1 is caused by improper handling of certain nested lists in SQL parse that could be exploited for denial of service.

• Is there a workaround for USN-6771-1 if I cannot update immediately?

  There is no known workaround for USN-6771-1, thus it is recommended to update to a secure version as soon as possible.