.fmf/version

@@ -1 +0,0 @@
-1

.gitignore

@@ -1 +1 @@
-/PyMySQL-1.0.2.tar.gz
+SOURCES/PyMySQL-1.0.2.tar.gz

.python3.11-PyMySQL.metadata

@@ -0,0 +1 @@
+d58a2901d390e651df3e17f1225c33b868f75650 SOURCES/PyMySQL-1.0.2.tar.gz

CVE-2024-36039.patch

@@ -1,17 +0,0 @@
-diff --git a/pymysql/converters.py b/pymysql/converters.py
-index 1adac75..dbf97ca 100644
---- a/pymysql/converters.py
-+++ b/pymysql/converters.py
-@@ -27,11 +27,7 @@ def escape_item(val, charset, mapping=None):
- 
- 
- def escape_dict(val, charset, mapping=None):
--    n = {}
--    for k, v in val.items():
--        quoted = escape_item(v, charset, mapping)
--        n[k] = quoted
--    return n
-+    raise TypeError("dict can not be used as parameter")
- 
- 
- def escape_sequence(val, charset, mapping=None):

SPECS/python3.11-PyMySQL.spec

@@ -5,18 +5,13 @@
 
 Name:           python%{python3_pkgversion}-%{pypi_name}
 Version:        1.0.2
-Release:        2%{?dist}
+Release:        1%{?dist}
 Summary:        Pure-Python MySQL client library
 
 License:        MIT
 URL:            https://pypi.python.org/pypi/%{pypi_name}/
 Source0:        %pypi_source
 
-# Security fix for CVE-2024-36039: SQL injection if used with untrusted JSON input
-# Resolved upstream: https://github.com/PyMySQL/PyMySQL/commit/521e40050cb386a499f68f483fefd144c493053c
-# Tracking bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2282821
-Patch0:         CVE-2024-36039.patch
-
 BuildArch:      noarch
 
 
@@ -38,7 +33,7 @@ and Jython.
 
 
 %prep
-%autosetup -n %{pypi_name}-%{version} -p1
+%setup -qn %{pypi_name}-%{version}
 rm -rf %{pypi_name}.egg-info
 # Remove tests files so they are not installed globally.
 rm -rf tests
@@ -63,10 +58,6 @@ rm -rf tests
 %{python3_sitelib}/pymysql/
 
 %changelog
-* Fri May 31 2024 Charalampos Stratakis <cstratak@redhat.com> - 1.0.2-2
-- Security fix for CVE-2024-36039
-Resolves: RHEL-38370
-
 * Wed Nov 30 2022 Charalampos Stratakis <cstratak@redhat.com> - 1.0.2-1
 - Initial package
 - Fedora contributions by:

gating.yaml

@@ -1,7 +0,0 @@
---- !Policy
-
-product_versions:
-  - rhel-9
-decision_context: osci_compose_gate
-rules:
-  - !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}

plan.fmf

@@ -1,8 +0,0 @@
-execute:
-  how: tmt
-discover:
-  - how: shell
-    tests:
-     - name: simple import
-       test: python3.11 -c 'import pymysql'
-  - how: fmf

sources

@@ -1 +0,0 @@
-SHA512 (PyMySQL-1.0.2.tar.gz) = c831505dafe6aebf039129ec4b09ef6dcafd490bcee2b515f42c0d0412fe9c379ba28650fb329d21f1da7e9fcae64968e1bc6065a04a08e00497a24967e27146

tests/smoke_test.fmf

@@ -1,8 +0,0 @@
-require:
-- mariadb-server
-- python3.11-PyMySQL
-
-test: |
-  systemctl start mariadb &&
-  python3.11 smoke_test.py &&
-  systemctl stop mariadb

tests/smoke_test.py

@@ -1,12 +0,0 @@
-#!/usr/bin/python3
-# Modified from
-# https://github.com/PyMySQL/PyMySQL/blob/v1.0.2/example.py
-
-import pymysql
-connection = pymysql.connect(unix_socket="/var/lib/mysql/mysql.sock", db="mysql")
-cursor = connection.cursor()
-cursor.execute("SELECT Host,User FROM user")
-print(cursor.description)
-
-cursor.close()
-connection.close()