1
0

Accepting request 1176449 from devel:languages:python

- Update to 1.1.1 (bsc#1225070):
  * Prohibit dict parameter for Cursor.execute(). It didn't produce
    valid SQL and might cause SQL injection. (CVE-2024-36039)
  * Added ssl_key_password param by @svaskov in #1145

OBS-URL: https://build.opensuse.org/request/show/1176449
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-PyMySQL?expand=0&rev=21
This commit is contained in:
Ana Guerrero 2024-05-23 13:36:06 +00:00 committed by Git OBS Bridge
commit 34a06ad53d
4 changed files with 14 additions and 6 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:e131859c075d571419c9a9939ed127f0b547901af908b498fe804bbdbdff3d82
size 90416

BIN
PyMySQL-1.1.1.tar.gz (Stored with Git LFS) Normal file

Binary file not shown.

View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Thu May 23 11:34:26 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
- Update to 1.1.1 (bsc#1225070):
* Prohibit dict parameter for Cursor.execute(). It didn't produce
valid SQL and might cause SQL injection. (CVE-2024-36039)
* Added ssl_key_password param by @svaskov in #1145
-------------------------------------------------------------------
Wed Aug 16 14:43:37 UTC 2023 - ecsos <ecsos@opensuse.org>

View File

@ -1,7 +1,7 @@
#
# spec file for package python-PyMySQL
#
# Copyright (c) 2023 SUSE LLC
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -25,7 +25,7 @@
%{?sle15_python_module_pythons}
Name: python-PyMySQL
Version: 1.1.0
Version: 1.1.1
Release: 0
Summary: Pure Python MySQL Driver
License: MIT
@ -77,7 +77,7 @@ dbuserpw='db_user_secret'
dbname1='test1'
dbname2='test2'
# Needs mysql server
#%%python_expand PYTHONPATH=%{buildroot}%{$python_sitelib} py.test-%{$python_bin_suffix} -v
#%%python_expand PYTHONPATH=%%{buildroot}%%{$python_sitelib} py.test-%%{$python_bin_suffix} -v
cconf=abuild-myclient.cnf
#
# start the mariadb server