UbuntuUpdates.org

Package "libdbi-perl"

Name: libdbi-perl

Description:

Perl Database Interface (DBI)
Latest version: 1.634-1ubuntu0.2
Release: xenial (16.04)
Level: security
Repository: main
Homepage: http://dbi.perl.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libdbi-perl"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libdbi-perl" in Xenial

Repository Area Version
base main 1.634-1build1
updates main 1.634-1ubuntu0.2

Changelog

Version: 1.634-1ubuntu0.2 2020-09-23 15:06:39 UTC

  libdbi-perl (1.634-1ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: NULL pointer dereference
    - debian/patches/CVE-2019-20919.patch: adds a check for NULL
      for PL_dirty and profile in DBI.xs.
    - CVE-2019-20919

 -- <email address hidden> (Leonidas S. Barbosa) Fri, 18 Sep 2020 13:02:45 -0300
Source diff to previous version
CVE-2019-20919 An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL and the code does that. But,

Version: 1.634-1ubuntu0.1 2020-09-16 14:06:54 UTC

  libdbi-perl (1.634-1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Memory corruption
    - debian/patches/CVE-2020-14392.patch: changes fix memory
      corruption in XS functions when Perl stack is reallocated in
      DBI.xs, Driver.xst.
    - CVE-2020-14392

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 14 Sep 2020 13:23:06 -0300


About   -   Send Feedback to @ubuntu_updates