Back Linuxsecurity

Fedora 42 python-asyncmy Important SQL Injection Threat 2026

Linuxsecurity •LinuxSecurity Advisories • March 7, 2026

asyncmy is a fast asyncio MySQL/MariaDB driver, which reuses most of pymysql and aiomysql but rewrites the core protocol with Cython to speed it up. Update Information : This is an upstream security and bugfix release. For details, see the release notes.

asyncmy is a fast asyncio MySQL/MariaDB driver, which reuses most of pymysql

and aiomysql but rewrites the core protocol with Cython to speed it up.

This is an upstream security and bugfix release. For details, see the release notes.

* Thu Feb 26 2026 Nils Philippsen - 0.2.11-1 - Update to 0.2.11 * Sat Jan 17 2026 Fedora Release Engineering - 0.2.10-9 - Rebuilt for * Fri Sep 19 2025 Python Maint - 0.2.10-8 - Rebuilt for Python 3.14.0rc3 bytecode * Fri Aug 15 2025 Python Maint - 0.2.10-7 - Rebuilt for Python 3.14.0rc2 bytecode * Fri Jul 25 2025 Fedora Release Engineering - 0.2.10-6 - Rebuilt for * Tue Jun 3 2025 Python Maint - 0.2.10-5 - Rebuilt for Python 3.14 * Fri May 2 2025 Benjamin A. Beasley - 0.2.10-4 - Update .rpmlintrc file for current rpmlint

[ 1 ] Bug #2418488 - CVE-2025-65896 python-asyncmy: Asyncmy SQL injection [fedora-42]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-cfa488b1ac' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical SQL Injection Vulnerability in Fedora's python-asyncmy Driver A significant SQL injection vulnerability has been identified in the python-asyncmy driver used in Fedora 42 and 44. This vulnerability, cataloged as CVE-2025-65896, was published on December 2, 2025, and affects users relying on this driver for MySQL/MariaDB operations. An upstream security and bugfix release has been issued to address this issue. 2 sources 67

Extracted Entities

Fedora 42 python-asyncmy Important SQL Injection Threat 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (3)

Tools (1)