Summary
[1.1.0-3]
- Security fix for CVE-2024-36039
Resolves: RHEL-38371
[1.1.0-2]
- Rebuilt for timestamp .pyc invalidation mode
[1.1.0-4]
- Initial package
- Fedora contributions by:
Benjamin A. Beasley <code@musicinmybrain.net>
Carl George <carl@george.computer>
Damien Ciabrini <dciabrin@redhat.com>
Haikel Guemar <hguemar@fedoraproject.org>
Iryna Shcherbina <shcherbina.iryna@gmail.com>
Itamar Reis Peixoto <itamar@ispbrasil.com.br>
Julien Enselme <jujens@jujens.eu>
Lumir Balhar <lbalhar@redhat.com>
Miro Hroncok <miro@hroncok.cz>
Yaakov Selkowitz <yselkowi@redhat.com>
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3.12-PyMySQL | 0:1.1.0-3.el9 |
| Oracle Linux · 9 | python3.12-PyMySQL+rsa | 0:1.1.0-3.el9 |
Vulnerabilities 1
-
Medium 6.3CVE-2024-36039 Public exploit
PyMySQL SQL Injection vulnerability
PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.