[ANNOUNCE] pyPgSQL 2.5.1 released
Gerhard Häring <[email protected]> Wed, 07 Jun 2006 19:41:26 +0200
| Newsgroups | gmane.comp.python.db.pypgsql.user |
|---|---|
| Message-ID | <[email protected]> |
I'll make it quick, but not *so* quick (accidentally sent a message a minute ago): Patch for a security hole in PostgreSQL (CVE-2006-2314): escaping quotes with backslashes is insecure. The change is to escape single quotes with another single quote: \' => ''. Thanks to Martin Pitt for the patch. Downloads (source, Windows binaries for Python 2.1, 2.2, 2.3, 2.4) at http://sourceforge.net/project/showfiles.php?group_id=16528&package_id=20458&release_id=423036 Cheers, -- Gerhard