Lucene search

K
redhatRedHatRHSA-2024:4244
HistoryJul 02, 2024 - 1:55 p.m.

(RHSA-2024:4244) Moderate: python3.11-PyMySQL security update

2024-07-0213:55:49
access.redhat.com
1
python
pymysql
security update
sql injection
json input

AI Score

7.3

Confidence

Low

This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython.

Security Fix(es):

  • python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarchpython3.11-pymysql< 1.0.2-2.el8_10python3.11-PyMySQL-1.0.2-2.el8_10.noarch.rpm