Accepting request 442507 from devel:languages:perl

1

OBS-URL: https://build.opensuse.org/request/show/442507
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/perl-DBD-mysql?expand=0&rev=43

DBD-mysql-4.040.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a3438bba3cce02b13870b146b9db76a519b98e978d9dfe8516a63daff2989040
-size 149783

DBD-mysql-4.041.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4777de11c464b515db9da95c08c225900d0594b65ba3256982dc21f9f9379040
+size 150508

perl-DBD-mysql.changes

@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Tue Nov 29 06:18:42 UTC 2016 - coolo@suse.com
+
+- updated to 4.041
+   see /usr/share/doc/packages/perl-DBD-mysql/Changes
+
+  2016-11-28 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.041)
+  * Fix use-after-free for repeated fetchrow_arrayref calls when
+    mysql_server_prepare=1
+  
+    Function dbd_st_fetch() via Renew() can reallocate output buffer for
+    mysql_stmt_fetch() call. But it does not update pointer to that buffer in
+    imp_sth->stmt structure initialized by mysql_stmt_bind_result() function.
+    That leads to use-after-free in any mysql function which access
+    imp_sth->stmt structure (e.g. mysql_stmt_fetch()).
+  
+    This patch fix this problem and properly updates pointer in imp_sth->stmt
+    structure after Renew() call.
+    This is a medium level security issue to which the Debian security team
+    assigned identifier CVE-2016-1251. Discovered and fixed by Pali Rohár.
+  
+  * auto_reconnect now also matches  CR_SERVER_LOST, previously this only
+    matched CR_SERVER_GONE.
+    Fixes http://bugs.mysql.com/bug.php?id=27613
+    Fix suggested by Wouter de Jong.
+  * Fix compilation fixes (Pali Rohár).
+
 -------------------------------------------------------------------
 Sun Nov 20 06:16:34 UTC 2016 - coolo@suse.com
 

perl-DBD-mysql.spec

@@ -17,7 +17,7 @@
 
 
 Name:           perl-DBD-mysql
-Version:        4.040
+Version:        4.041
 Release:        0
 %define cpan_name DBD-mysql
 Summary:        MySQL driver for the Perl5 Database Interface (DBI)