PVE-2022-51884

Advisory

Duckdb 0.6.0 fixes overflow when using substrings. https://github.com/duckdb/duckdb/pull…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This preview release of DuckDB is named "Oxyura" after the [White-headed duck (Oxyura leu…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://pypi.org/project/duckdb
• https://pyup.io/changelogs/duckdb/