Accepting request 442507 from devel:languages:perl
1 OBS-URL: https://build.opensuse.org/request/show/442507 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/perl-DBD-mysql?expand=0&rev=43
This commit is contained in:
commit
ef32fcdff3
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:a3438bba3cce02b13870b146b9db76a519b98e978d9dfe8516a63daff2989040
|
|
||||||
size 149783
|
|
3
DBD-mysql-4.041.tar.gz
Normal file
3
DBD-mysql-4.041.tar.gz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:4777de11c464b515db9da95c08c225900d0594b65ba3256982dc21f9f9379040
|
||||||
|
size 150508
|
@ -1,3 +1,30 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Nov 29 06:18:42 UTC 2016 - coolo@suse.com
|
||||||
|
|
||||||
|
- updated to 4.041
|
||||||
|
see /usr/share/doc/packages/perl-DBD-mysql/Changes
|
||||||
|
|
||||||
|
2016-11-28 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.041)
|
||||||
|
* Fix use-after-free for repeated fetchrow_arrayref calls when
|
||||||
|
mysql_server_prepare=1
|
||||||
|
|
||||||
|
Function dbd_st_fetch() via Renew() can reallocate output buffer for
|
||||||
|
mysql_stmt_fetch() call. But it does not update pointer to that buffer in
|
||||||
|
imp_sth->stmt structure initialized by mysql_stmt_bind_result() function.
|
||||||
|
That leads to use-after-free in any mysql function which access
|
||||||
|
imp_sth->stmt structure (e.g. mysql_stmt_fetch()).
|
||||||
|
|
||||||
|
This patch fix this problem and properly updates pointer in imp_sth->stmt
|
||||||
|
structure after Renew() call.
|
||||||
|
This is a medium level security issue to which the Debian security team
|
||||||
|
assigned identifier CVE-2016-1251. Discovered and fixed by Pali Rohár.
|
||||||
|
|
||||||
|
* auto_reconnect now also matches CR_SERVER_LOST, previously this only
|
||||||
|
matched CR_SERVER_GONE.
|
||||||
|
Fixes http://bugs.mysql.com/bug.php?id=27613
|
||||||
|
Fix suggested by Wouter de Jong.
|
||||||
|
* Fix compilation fixes (Pali Rohár).
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Sun Nov 20 06:16:34 UTC 2016 - coolo@suse.com
|
Sun Nov 20 06:16:34 UTC 2016 - coolo@suse.com
|
||||||
|
|
||||||
|
@ -17,7 +17,7 @@
|
|||||||
|
|
||||||
|
|
||||||
Name: perl-DBD-mysql
|
Name: perl-DBD-mysql
|
||||||
Version: 4.040
|
Version: 4.041
|
||||||
Release: 0
|
Release: 0
|
||||||
%define cpan_name DBD-mysql
|
%define cpan_name DBD-mysql
|
||||||
Summary: MySQL driver for the Perl5 Database Interface (DBI)
|
Summary: MySQL driver for the Perl5 Database Interface (DBI)
|
||||||
|
Loading…
Reference in New Issue
Block a user