This commit is contained in:
Limuthu Lohiru 2026-06-10 02:57:19 +01:00 committed by GitHub
commit 7eca04252e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 2 additions and 1 deletions

View file

@ -18,6 +18,7 @@ ver. 1.1.1-dev-1 (20??/??/??) - development nightly edition
to use it as before set `mode = more` for exim jail, but be aware of the consequences.
### Fixes
* Potential SQL injection in database.py using parameterized queries
* fixes `systemd` bug with missing journal descriptor after rotation by reopening of journal if it is recognized as not alive (gh-3929)
* improve threaded clean-up of all filters, new thread functions `afterStop` (to force clean-up after stop) and `done`, invoking `afterStop` once
* ensure journal-reader is always closed (additional prevention against leaks and "too many open files"), thereby avoid sporadic segfault

View file

@ -443,7 +443,7 @@ class Fail2BanDb(object):
if enabled is None:
cur.execute("SELECT name FROM jails")
else:
cur.execute("SELECT name FROM jails WHERE enabled=%s" %
cur.execute("SELECT name FROM jails WHERE enabled=?",
(int(enabled),))
return set(row[0] for row in cur.fetchmany())