https://bugzilla.redhat.com/show_bug.cgi?id=1361073 Bug ID: 1361073 Summary: CVE-2014-9906 perl-DBD-MySQL: Use after free in mysql_dr_error Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@xxxxxxxxxx Reporter: amaris@xxxxxxxxxx CC: jplesnik@xxxxxxxxxx, perl-devel@xxxxxxxxxxxxxxxxxxxxxxx, perl-maint-list@xxxxxxxxxx, ppisar@xxxxxxxxxx, psabata@xxxxxxxxxx A use-after-free vulnerability in mysql_dr_error was found. Upstream bug: https://rt.cpan.org/Public/Bug/Display.html?id=97625 https://github.com/perl5-dbi/DBD-mysql/pull/27 Upstream patch: https://github.com/perl5-dbi/DBD-mysql/commit/a56ae87a4c1c1fead7d09c3653905841ccccf1cc CVE assignment: http://seclists.org/oss-sec/2016/q3/169 -- You are receiving this mail because: You are on the CC list for the bug. -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@xxxxxxxxxxxxxxxxxxxxxxx https://lists.fedoraproject.org/admin/lists/perl-devel@xxxxxxxxxxxxxxxxxxxxxxx
