Lucene search

K
almalinuxAlmaLinuxALSA-2024:4244
HistoryJul 02, 2024 - 12:00 a.m.

Moderate: python3.11-PyMySQL security update

2024-07-0200:00:00
errata.almalinux.org
12
python3.11
pymysql
security update
sql injection
json input
cve-2024-36039

AI Score

8.2

Confidence

Low

This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython.

Security Fix(es):

  • python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchpython3.11-pymysql< 1.0.2-2.el8_10python3.11-PyMySQL-1.0.2-2.el8_10.noarch.rpm