Register | Log in

libdbd-mysql-perl

Perl5 database interface to the MariaDB/MySQL database

Choose email to subscribe with

general

source: libdbd-mysql-perl (main)
version: 4.050-2
maintainer: Debian Perl Group (archive) (DMD) (LowNMU)
uploaders: gregor herrmann [DMD] – Ansgar Burchardt [DMD] – Xavier Guimard [DMD]
arch: any
std-ver: 4.3.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 4.028-2+deb8u2
o-o-sec: 4.028-2+deb8u2
oldstable: 4.041-2
stable: 4.050-2
testing: 4.050-2
unstable: 4.050-2

versioned links

4.028-2+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.041-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.050-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libdbd-mysql-perl

action needed

Debci reports failed tests high

testing: pass (log)
The tests ran in 0h 1m 40s
Last run: 2019-08-23 05:28:55
Previous status: pass

unstable: pass (log)
The tests ran in 0h 2m 49s
Last run: 2019-08-02 22:48:16
Previous status: pass

stable: fail (log)
The tests ran in 0h 2m 20s
Last run: 2019-04-21 20:17:51
Previous status: fail

Created: 2019-06-04 Last update: 2019-08-25 00:32

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 4.050-3, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 6b111441879cff808020bfc32c6a24520eb9445d
Author: gregor herrmann <gregoa@debian.org>
Date:   Fri Jun 7 17:24:08 2019 +0200

    update changelog
    
    Gbp-Dch: Ignore

commit e03f519052486caf1bb1ee051666257782f1af7b
Author: gregor herrmann <gregoa@debian.org>
Date:   Fri Jun 7 17:24:08 2019 +0200

    debian/*: replace ADTTMP with AUTOPKGTEST_TMP.

commit 9ff3b9b1a73dbaa9b31fb9ddc360afed82fadbe8
Author: gregor herrmann <gregoa@debian.org>
Date:   Wed Jun 5 17:24:35 2019 +0200

    update changelog
    
    Gbp-Dch: Ignore

commit 1474acee306917892952c249176732fe914bf629
Author: gregor herrmann <gregoa@debian.org>
Date:   Wed Jun 5 17:24:04 2019 +0200

    Update autopkgtest setup.
    
    Only override smoke test instead of duplicating whole test stack.

Created: 2019-06-05 Last update: 2019-08-24 23:04

4 ignored security issues in jessie low

There are 4 open security issues in jessie.

4 issues skipped by the security teams:

CVE-2017-10788: The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples.
CVE-2017-10789: The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the server will be encrypted" statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.
CVE-2016-1249: The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service (out-of-bounds read) via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression.
CVE-2016-1251: There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.

Please fix them.

Created: 2016-11-16 Last update: 2019-07-07 09:01

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2017-10788: The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples.
CVE-2017-10789: The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the server will be encrypted" statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.

Please fix them.

Created: 2017-07-02 Last update: 2019-07-07 09:01

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.0 instead of 4.3.0).

Created: 2019-07-08 Last update: 2019-07-08 20:09

news

[2019-03-10] libdbd-mysql-perl 4.050-2 MIGRATED to testing (Debian testing watch)
[2019-03-07] Accepted libdbd-mysql-perl 4.050-2 (source) into unstable (gregor herrmann)
[2019-01-19] libdbd-mysql-perl 4.050-1 MIGRATED to testing (Debian testing watch)
[2019-01-09] Accepted libdbd-mysql-perl 4.050-1 (source) into unstable (gregor herrmann)
[2018-11-29] libdbd-mysql-perl 4.049-1 MIGRATED to testing (Debian testing watch)
[2018-11-26] Accepted libdbd-mysql-perl 4.049-1 (source) into unstable (gregor herrmann)
[2018-10-15] libdbd-mysql-perl 4.048-1 MIGRATED to testing (Debian testing watch)
[2018-10-12] Accepted libdbd-mysql-perl 4.048-1 (source) into unstable (gregor herrmann)
[2018-09-14] libdbd-mysql-perl 4.047-1 MIGRATED to testing (Debian testing watch)
[2018-09-14] libdbd-mysql-perl 4.047-1 MIGRATED to testing (Debian testing watch)
[2018-09-12] Accepted libdbd-mysql-perl 4.047-1 (source) into unstable (Xavier Guimard)
[2018-02-24] libdbd-mysql-perl 4.046-1 MIGRATED to testing (Debian testing watch)
[2018-02-17] Accepted libdbd-mysql-perl 4.046-1 (source) into unstable (gregor herrmann)
[2017-08-30] Accepted libdbd-mysql-perl 4.021-1+deb7u3 (source amd64) into oldoldstable (Antoine Beaupré)
[2017-03-04] libdbd-mysql-perl 4.041-2 MIGRATED to testing (Debian testing watch)
[2017-02-26] Accepted libdbd-mysql-perl 4.041-2 (source) into unstable (gregor herrmann)
[2016-12-04] libdbd-mysql-perl 4.041-1 MIGRATED to testing (Debian testing watch)
[2016-11-28] Accepted libdbd-mysql-perl 4.041-1 (source) into unstable (Salvatore Bonaccorso)
[2016-11-25] libdbd-mysql-perl 4.040-1 MIGRATED to testing (Debian testing watch)
[2016-11-19] Accepted libdbd-mysql-perl 4.040-1 (source) into unstable (gregor herrmann)
[2016-11-16] Accepted libdbd-mysql-perl 4.039-1 (source) into unstable (Salvatore Bonaccorso)
[2016-11-02] libdbd-mysql-perl 4.037-5 MIGRATED to testing (Debian testing watch)
[2016-10-27] Accepted libdbd-mysql-perl 4.037-5 (source) into unstable (gregor herrmann)
[2016-10-23] Accepted libdbd-mysql-perl 4.037-4 (source) into unstable (gregor herrmann)
[2016-10-21] libdbd-mysql-perl 4.037-3 MIGRATED to testing (Debian testing watch)
[2016-10-15] Accepted libdbd-mysql-perl 4.037-3 (source) into unstable (gregor herrmann)
[2016-10-15] Accepted libdbd-mysql-perl 4.037-2 (source) into unstable (gregor herrmann)
[2016-10-15] Accepted libdbd-mysql-perl 4.021-1+deb7u2 (source amd64) into oldstable (Jonas Meurer)
[2016-10-08] Accepted libdbd-mysql-perl 4.028-2+deb8u2 (source amd64) into proposed-updates->stable-new, proposed-updates (Florian Weimer)
[2016-10-06] libdbd-mysql-perl 4.037-1 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.050-2build1
3 bugs

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing