gpp_maybe Security update for python3-sqlparse

SUSE-SLE-Module-Basesystem-15-SP7-2026-3906

This update for python3-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption (bsc#1275459). - CVE-2026-59893: quadratic complexity when processing unmatched dollar-quoted literal and multiline-comment delimiters can lead to denial of service (bsc#1275461). - CVE-2026-59894: improper backlash escaping allows for injection of Python or PHP code via a crafted SQL input (bsc#1275460). - CVE-2026-71491: quadratic complexity in `group_comments` when processing comment-only statements can lead to denial of services (bsc#1275466).

Release Date

Sep 1 2026
References

Bugzilla: 1275459, 1275460, 1275461, 1275466
CVEs: CVE-2026-54284, CVE-2026-59893, CVE-2026-59894, CVE-2026-71491
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.7 s390x

Packages

python3-sqlparse
Non-validating SQL parser

0.4.2-150300.23.1 lock rpm lock src

Basesystem Module 15.7 ppc64le

Packages

python3-sqlparse
Non-validating SQL parser

0.4.2-150300.23.1 lock rpm lock src

Basesystem Module 15.7 aarch64

Packages

python3-sqlparse
Non-validating SQL parser

0.4.2-150300.23.1 lock rpm lock src

Basesystem Module 15.7 x86_64

Packages

python3-sqlparse
Non-validating SQL parser

0.4.2-150300.23.1 lock rpm lock src