Path: csiph.com!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod From: Florian Weimer Newsgroups: linux.debian.announce.security Subject: [SECURITY] [DSA 3684-1] libdbd-mysql-perl security update Date: Mon, 03 Oct 2016 19:20:02 +0200 Message-ID: X-Original-To: debian-security-announce@lists.debian.org X-Mailbox-Line: From debian-security-announce-request@lists.debian.org Mon Oct 3 17:18:39 2016 Old-Return-Path: X-Amavis-Spam-Status: No, score=-14.079 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DIGITS_LETTERS=1, FVGT_m_MULTI_ODD=0.02, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RP_MATCHES_RCVD=-3.099] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -6.1 MIME-Version: 1.0 Content-Type: text/plain X-Debian: PGP check passed for security officers Priority: urgent Reply-To: debian-security-announce-request@lists.debian.org X-Mailing-List: archive/latest/2519 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/87ponhxsf8.fsf@mid.deneb.enyo.de Approved: robomod@news.nic.it Lines: 38 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Mon, 03 Oct 2016 19:18:19 +0200 X-Original-Message-ID: <87ponhxsf8.fsf@mid.deneb.enyo.de> Xref: csiph.com linux.debian.announce.security:2162 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3684-1 security@debian.org https://www.debian.org/security/ Florian Weimer October 03, 2016 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libdbd-mysql-perl CVE ID : CVE-2016-1246 Paul Rohar discovered that libdbd-mysql-perl, the Perl DBI database driver for MySQL and MariaDB, constructed an error message in a fixed-length buffer, leading to a crash (_FORTIFY_SOURCE failure) and, potentially, to denial of service. For the stable distribution (jessie), this problem has been fixed in version 4.028-2+deb8u2. We recommend that you upgrade your libdbd-mysql-perl packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJX8pvgAAoJEL97/wQC1SS+WpkIALL0JHF9wO4NzQ7akLBW3aY4 sRDUnboupi6hD3vFeJAKPWidM42Iyu5qoWVvhGmVDQ6MaBf2GOZmN9xXSQTnXVvX vRcp76G4HDn5JvZbesYrWvnB5VHGTI7pBsnTDeqqzyxD1OE2UIrsyncG+QokHJrH iY6AXB/CYnftvE1nObr5eeBmtUaqHPxypZ5/S9KzFwCSWYWWhuxlSZ9KsP7rl4aF AOMy3IwSF/a4Jc5/r2qkgmjOU/n4NfmhSqiepJyMg0j5beGNG/Qt4NbY0s5dhAZF hAsJZEP+Eg57MuXj4sTcRGKFCSNCwF6XJEMjkAN5yIHK0Z/Q+CcIufbTloB4efw= =zm83 -----END PGP SIGNATURE-----