Accepting request 442507 from devel:languages:perl

1

OBS-URL: https://build.opensuse.org/request/show/442507
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/perl-DBD-mysql?expand=0&rev=43
This commit is contained in:
Dominique Leuenberger 2016-11-29 11:50:08 +00:00 committed by Git OBS Bridge
commit ef32fcdff3
4 changed files with 31 additions and 4 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:a3438bba3cce02b13870b146b9db76a519b98e978d9dfe8516a63daff2989040
size 149783

3
DBD-mysql-4.041.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:4777de11c464b515db9da95c08c225900d0594b65ba3256982dc21f9f9379040
size 150508

View File

@ -1,3 +1,30 @@
-------------------------------------------------------------------
Tue Nov 29 06:18:42 UTC 2016 - coolo@suse.com
- updated to 4.041
see /usr/share/doc/packages/perl-DBD-mysql/Changes
2016-11-28 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.041)
* Fix use-after-free for repeated fetchrow_arrayref calls when
mysql_server_prepare=1
Function dbd_st_fetch() via Renew() can reallocate output buffer for
mysql_stmt_fetch() call. But it does not update pointer to that buffer in
imp_sth->stmt structure initialized by mysql_stmt_bind_result() function.
That leads to use-after-free in any mysql function which access
imp_sth->stmt structure (e.g. mysql_stmt_fetch()).
This patch fix this problem and properly updates pointer in imp_sth->stmt
structure after Renew() call.
This is a medium level security issue to which the Debian security team
assigned identifier CVE-2016-1251. Discovered and fixed by Pali Rohár.
* auto_reconnect now also matches CR_SERVER_LOST, previously this only
matched CR_SERVER_GONE.
Fixes http://bugs.mysql.com/bug.php?id=27613
Fix suggested by Wouter de Jong.
* Fix compilation fixes (Pali Rohár).
------------------------------------------------------------------- -------------------------------------------------------------------
Sun Nov 20 06:16:34 UTC 2016 - coolo@suse.com Sun Nov 20 06:16:34 UTC 2016 - coolo@suse.com

View File

@ -17,7 +17,7 @@
Name: perl-DBD-mysql Name: perl-DBD-mysql
Version: 4.040 Version: 4.041
Release: 0 Release: 0
%define cpan_name DBD-mysql %define cpan_name DBD-mysql
Summary: MySQL driver for the Perl5 Database Interface (DBI) Summary: MySQL driver for the Perl5 Database Interface (DBI)