Skip to content
OpenAdvisories
Critical RHSA-2012:0369 1 CVE

Red Hat Security Advisory: python-sqlalchemy security update

Published Sep 15, 2024 · Updated Nov 22, 2025

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::server python-sqlalchemy 0:0.5.5-3.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation python-sqlalchemy 0:0.5.5-3.el6_2

Vulnerabilities 1

  • Critical 9.8

    SQLAlchemy vulnerable to SQL injection

    Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit o…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=783305
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0369.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-0805
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0805
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0805