Описание
Security update for python-PyMySQL
This update for python-PyMySQL fixes the following issues:
- CVE-2024-36039: Fixed SQL injection when used with untrusted JSON input (bsc#1225070).
Список пакетов
openSUSE Leap 15.6
python311-PyMySQL-1.1.0-150600.3.3.1
Ссылки
- Link for SUSE-SU-2024:1925-1
- E-Mail link for SUSE-SU-2024:1925-1
- SUSE Security Ratings
- SUSE Bug 1225070
- SUSE CVE CVE-2024-36039 page
Описание
PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.
Затронутые продукты
openSUSE Leap 15.6:python311-PyMySQL-1.1.0-150600.3.3.1
Ссылки
- CVE-2024-36039
- SUSE Bug 1225070