[Secure-testing-commits] r55251 - data/CVE

[Antoine Beaupré]

Author: anarcat
Date: 2017-08-30 17:49:39 +0000 (Wed, 30 Aug 2017)
New Revision: 55251

Modified:
   data/CVE/list
Log:
add patchsets for libdbd-mysql-perl issues



Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-30 16:58:44 UTC (rev 55250)
+++ data/CVE/list	2017-08-30 17:49:39 UTC (rev 55251)
@@ -8222,12 +8222,14 @@
 	[jessie] - libdbd-mysql-perl <no-dsa> (Minor issue, can be fixed via point release)
 	NOTE: https://github.com/perl5-dbi/DBD-mysql/issues/110
 	NOTE: https://github.com/perl5-dbi/DBD-mysql/pull/114
+	NOTE: upstream 4.042 fixes this issue, but was reverted upstream in 4.043: https://www.nntp.perl.org/group/perl.dbi.dev/2017/08/msg8037.html
 CVE-2017-10788 (The DBD::mysql module through 4.043 for Perl allows remote attackers to ...)
 	- libdbd-mysql-perl <unfixed> (bug #866818)
 	[stretch] - libdbd-mysql-perl <no-dsa> (Minor issue, can be fixed via point release)
 	[jessie] - libdbd-mysql-perl <no-dsa> (Minor issue, can be fixed via point release)
 	NOTE: http://seclists.org/oss-sec/2017/q2/443
 	NOTE: https://github.com/perl5-dbi/DBD-mysql/issues/120
+	NOTE: https://github.com/perl5-dbi/DBD-mysql/pull/142
 CVE-2017-10787
 	RESERVED
 CVE-2017-10786