-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 06 Nov 2021 22:27:44 +0100 Source: sqlalchemy Architecture: source Version: 1.0.15+ds1-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Piotr Ożarowski <piotr@debian.org> Changed-By: Markus Koschany <apo@debian.org> Changes: sqlalchemy (1.0.15+ds1-1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2019-7164 and CVE-2019-7548: Two SQL injection vulnerabilities were discovered in SQLAlchemy, an SQL toolkit and Object Relational Mapper for Python, when the order_by or group_by parameters can be controlled by an attacker. Warning: The text coercion feature of SQLAlchemy is rarely used but the warning that has been previously emitted is now an ArgumentError or in case of the order_by() and group_by() parameters a CompileError. Checksums-Sha1: 7ac376f0246560be81355fa23aad68aa333f093f 2755 sqlalchemy_1.0.15+ds1-1+deb9u1.dsc f8f48a861f3035c6d86c80c12c7b2f59d892be48 2572951 sqlalchemy_1.0.15+ds1.orig.tar.gz a3ea0cfc0f9bab49bcfbc474d64f6b9711191b86 18992 sqlalchemy_1.0.15+ds1-1+deb9u1.debian.tar.xz b9a29c7b205c7471b9dba39ccb1d755ddd608c8c 5788 sqlalchemy_1.0.15+ds1-1+deb9u1_source.buildinfo Checksums-Sha256: 14ec5b6bd5cfee1ede79062f1c9237557f0381e8351f2cf5fb24085bf24859d1 2755 sqlalchemy_1.0.15+ds1-1+deb9u1.dsc 113497295f2dac2faed364956aef2d0e754164583d76a2f7670cfb8cd8cf131b 2572951 sqlalchemy_1.0.15+ds1.orig.tar.gz de5ae052334263bbbae8741f243faa9590f6ba7d674095455cc17bd2c93c2140 18992 sqlalchemy_1.0.15+ds1-1+deb9u1.debian.tar.xz 41b8e8ac66bc7e8d13d7ba836a8228e9ea39db0155cec821b6f49341ba9e09a4 5788 sqlalchemy_1.0.15+ds1-1+deb9u1_source.buildinfo Files: de26a5a0da49f42aa5cccef6ac900260 2755 python optional sqlalchemy_1.0.15+ds1-1+deb9u1.dsc aae706a69f881eeda041d0ca7c7844bf 2572951 python optional sqlalchemy_1.0.15+ds1.orig.tar.gz 68fdc3c1797c32f1c6d508c2dd908b05 18992 python optional sqlalchemy_1.0.15+ds1-1+deb9u1.debian.tar.xz f8fe6da0e0e48525484214c585e9c93b 5788 python optional sqlalchemy_1.0.15+ds1-1+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmGG+E9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hk4NwP/2FMxPx2641PF8ypp//MrQPiNr2X3REKqb/6 PbmuI3H4gI1rbWKhKJV8gNJcMwx4xMYnptn1ok1QdYUc6oPvryDvetQ7fPzJy6F+ ueXXKDgrXmTnr1xr6gjpJAle26cqcvlVdd4r187oUSuulqOCmZJaFTZxPZKWI2KY FVDJYW4OvgH9IEWynqzY7QnZxgKWpUGxB36t+AnBCeZgUort2jJNzKNByFHkEHff RNzQoDC0GOZZl0wJ/lSud3hCHxcldSG5RqCPI8t2OC/VmZpAqWaprasm8r4Z1KuG 2NV+yAAGgVLicGXlIulDXlAzzAWlQmhcOxTDuuVtXMmoW7Lu2D/jgMdeyZRixJsJ r+N54PoHyXhdRl0n4r/6tU92N0hJYPqPkgCgRrEv2n/yfGSLCMLbcbo1IhXM1xs7 tqQvfOB7FShD6kQAI65XKIzvThlppJyfLy+TsAzz/jQbxVsWqUR3J7SC/8T1eBeJ 6CcotKtqCs1YV+ZeKafblvC3tJMhBu0jFC8QWguQPJcARXF9SN0ho1Ufs5Zh4oru GMOfgVINMn5oiUFS4meschV0dYcaycqq3zXDvLeRF2wkSeyPhgOCyaGPeswbJ9pN O9hWjm/r1yYd6xDuuOzKXqN8K6MdBhP9hc5xBFqyQn3IBNNVHIlTAvyklRkC4v6Y eWEvZMb9 =40N6 -----END PGP SIGNATURE-----
