python-sqlalchemy-0.5.5-3.AXS4

エラータID: AXSA:2012-366:01

Release date: 
Tuesday, March 20, 2012 - 19:34
Subject: 
python-sqlalchemy-0.5.5-3.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

SQLAlchemy is an Object Relational Mappper (ORM) that provides a flexible, high-level interface to SQL databases. Database and domain concepts are decoupled, allowing both sides maximum flexibility and power. SQLAlchemy provides a powerful mapping layer that can work as automatically or as manually as you choose, determining relationships based on foreign keys or letting you define the join conditions explicitly, to bridge the gap between database and domain.
Security issues fixed with this release:
CVE-2012-0805
No description available at the time of writing, please refer to the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2012-0805
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.


Additional Info: 

N/A

Download: 

SRPMS
  1. python-sqlalchemy-0.5.5-3.AXS4.src.rpm
    MD5: de93f8cd8260000ac4eb522999e9fb7d
    SHA-256: 168ebe2d387af299420c093b57cc23fc608ac0c2dcd3ebe3daac5a75ff5424c0
    Size: 1.40 MB

Asianux Server 4 for x86
  1. python-sqlalchemy-0.5.5-3.AXS4.noarch.rpm
    MD5: c425f01b3438d18217d7be2a1210b8aa
    SHA-256: b61c8f7fd0bb709700ebf8cb4bf1f6b2119041fca89211247a3047453016dfd1
    Size: 1.30 MB

Asianux Server 4 for x86_64
  1. python-sqlalchemy-0.5.5-3.AXS4.noarch.rpm
    MD5: 97b1a37e77f7a55b337ac79cc07aec49
    SHA-256: e25984c294aa1dbfa861b200e4684fb61cf6a08f78bcd2e2b59206eea0efeeb3
    Size: 1.30 MB