[Secure-testing-commits] r43515 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-07-27 05:13:45 +0000 (Wed, 27 Jul 2016)
New Revision: 43515

Modified:
   data/CVE/list
Log:
Add CVE-2015-8949/libdbd-mysql-perl

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-07-27 05:08:55 UTC (rev 43514)
+++ data/CVE/list	2016-07-27 05:13:45 UTC (rev 43515)
@@ -367,6 +367,10 @@
 	NOTE: https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html
 	NOTE: Test / Fix: http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=1fbee57ef3c72db2206dd87e4162108b2f425555 (libidn-1-33)
 	NOTE: http://www.openwall.com/lists/oss-security/2016/07/20/6
+CVE-2015-8949 [Use after free in my_login() function of DBD::mysql]
+	- libdbd-mysql-perl 4.035-1
+	NOTE: https://github.com/perl5-dbi/DBD-mysql/pull/45
+	NOTE: https://github.com/perl5-dbi/DBD-mysql/commit/cf0aa7751f6ef8445e9310a64b14dc81460ca156
 CVE-2015-8948 [Solve out-of-bounds-read when reading one zero byte as input]
 	RESERVED
 	- libidn 1.33-1