[ALSA-2024:4244] Moderate: python3.11-PyMySQL security update
Type:
security
Severity:
moderate
Release date:
2024-07-03
Description:
This package contains a pure-Python MySQL client library. The goal of PyMySQL is to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython and Jython. Security Fix(es): * python-pymysql: SQL injection if used with untrusted JSON input (CVE-2024-36039) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
noarch python3.11-PyMySQL-1.0.2-2.el8_10.noarch.rpm eff363deec11c0336c4bff86155351f482527653977101348eb1b67450bab2c7
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.