Bug#930996: Bug#929321: Update for SQLAlchemy to address CVE-2019-7164 CVE-2019-7548

2019-06-28 Thread Thomas Goirand
On 6/27/19 8:39 PM, Paul Gevers wrote: > Hi Thomas, > > On 31-05-2019 01:34, Thomas Goirand wrote: >> Dear package maintainer, >> >> We're about to upgrade SQLAlchemy in Buster to address an SQL injection >> issue. The fixed package is in unstable, under the version 1.2.18+ds1-2. >> >> In some

Bug#930996: Bug#929321: Update for SQLAlchemy to address CVE-2019-7164 CVE-2019-7548

2019-06-28 Thread Thomas Goirand
On 6/27/19 8:39 PM, Paul Gevers wrote: > Hi Thomas, > > On 31-05-2019 01:34, Thomas Goirand wrote: >> Dear package maintainer, >> >> We're about to upgrade SQLAlchemy in Buster to address an SQL injection >> issue. The fixed package is in unstable, under the version 1.2.18+ds1-2. >> >> In some

Bug#930996: Bug#929321: Update for SQLAlchemy to address CVE-2019-7164 CVE-2019-7548

2019-06-27 Thread Paul Gevers
Hi Thomas, On 31-05-2019 01:34, Thomas Goirand wrote: > Dear package maintainer, > > We're about to upgrade SQLAlchemy in Buster to address an SQL injection > issue. The fixed package is in unstable, under the version 1.2.18+ds1-2. > > In some rare cases, this update may break reverse

Bug#929321: Update for SQLAlchemy to address CVE-2019-7164 CVE-2019-7548

2019-05-31 Thread Paul Gevers
Control: tags -1 - moreinfo Hi Thomas, On 31-05-2019 01:34, Thomas Goirand wrote: > Dear package maintainer, > > We're about to upgrade SQLAlchemy in Buster to address an SQL injection > issue. The fixed package is in unstable, under the version 1.2.18+ds1-2. > > In some rare cases, this

Bug#929321: Update for SQLAlchemy to address CVE-2019-7164 CVE-2019-7548

2019-05-30 Thread Thomas Goirand
Dear package maintainer, We're about to upgrade SQLAlchemy in Buster to address an SQL injection issue. The fixed package is in unstable, under the version 1.2.18+ds1-2. In some rare cases, this update may break reverse depenencies, leading to non-working SQL queries. This is why I'm writing