Groups > linux.debian.announce.security > #2162

[SECURITY] [DSA 3684-1] libdbd-mysql-perl security update

Path	csiph.com!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod
From	Florian Weimer <fw@deneb.enyo.de>
Newsgroups	linux.debian.announce.security
Subject	[SECURITY] [DSA 3684-1] libdbd-mysql-perl security update
Date	Mon, 03 Oct 2016 19:20:02 +0200
Message-ID	<sof4e-7Py-25@gated-at.bofh.it> (permalink)
X-Original-To	debian-security-announce@lists.debian.org
X-Mailbox-Line	From debian-security-announce-request@lists.debian.org Mon Oct 3 17:18:39 2016
Old-Return-Path	<fw@deneb.enyo.de>
X-Amavis-Spam-Status	No, score=-14.079 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DIGITS_LETTERS=1, FVGT_m_MULTI_ODD=0.02, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RP_MATCHES_RCVD=-3.099] autolearn=ham autolearn_force=no
X-Policyd-Weight	using cached result; rate: -6.1
MIME-Version	1.0
Content-Type	text/plain
X-Debian	PGP check passed for security officers
Priority	urgent
Reply-To	debian-security-announce-request@lists.debian.org
X-Mailing-List	<debian-security-announce@lists.debian.org> archive/latest/2519
List-ID	<debian-security-announce.lists.debian.org>
List-URL	<http://lists.debian.org/debian-security-announce/>
List-Archive	https://lists.debian.org/msgid-search/87ponhxsf8.fsf@mid.deneb.enyo.de
Approved	robomod@news.nic.it
Lines	38
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Mon, 03 Oct 2016 19:18:19 +0200
X-Original-Message-ID	<87ponhxsf8.fsf@mid.deneb.enyo.de>
Xref	csiph.com linux.debian.announce.security:2162

Show key headers only | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3684-1                   security@debian.org
https://www.debian.org/security/                           Florian Weimer
October 03, 2016                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : libdbd-mysql-perl
CVE ID         : CVE-2016-1246

Paul Rohar discovered that libdbd-mysql-perl, the Perl DBI database
driver for MySQL and MariaDB, constructed an error message in a
fixed-length buffer, leading to a crash (_FORTIFY_SOURCE failure) and,
potentially, to denial of service.

For the stable distribution (jessie), this problem has been fixed in
version 4.028-2+deb8u2.

We recommend that you upgrade your libdbd-mysql-perl packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJX8pvgAAoJEL97/wQC1SS+WpkIALL0JHF9wO4NzQ7akLBW3aY4
sRDUnboupi6hD3vFeJAKPWidM42Iyu5qoWVvhGmVDQ6MaBf2GOZmN9xXSQTnXVvX
vRcp76G4HDn5JvZbesYrWvnB5VHGTI7pBsnTDeqqzyxD1OE2UIrsyncG+QokHJrH
iY6AXB/CYnftvE1nObr5eeBmtUaqHPxypZ5/S9KzFwCSWYWWhuxlSZ9KsP7rl4aF
AOMy3IwSF/a4Jc5/r2qkgmjOU/n4NfmhSqiepJyMg0j5beGNG/Qt4NbY0s5dhAZF
hAsJZEP+Eg57MuXj4sTcRGKFCSNCwF6XJEMjkAN5yIHK0Z/Q+CcIufbTloB4efw=
=zm83
-----END PGP SIGNATURE-----

Back to linux.debian.announce.security | Previous | Next | Find similar | Unroll thread

Thread

[SECURITY] [DSA 3684-1] libdbd-mysql-perl security update Florian Weimer <fw@deneb.enyo.de> - 2016-10-03 19:20 +0200

csiph-web