[libdbd-mysql-perl] 01/02: update changelog: remove TODO, expand bug subjects

gregor herrmann gregoa at debian.org
Sat Feb 17 22:44:26 UTC 2018


This is an automated email from the git hooks/post-receive script.

gregoa pushed a commit to branch master
in repository libdbd-mysql-perl.

commit 73097ea40cb71f1ba3ccc969e3ffe21dd04d3bbf
Author: gregor herrmann <gregoa at debian.org>
Date:   Sat Feb 17 23:07:48 2018 +0100

    update changelog: remove TODO, expand bug subjects
    
    thanks to carnil!
    
    Gbp-Dch: Ignore
---
 debian/changelog | 11 +++--------
 1 file changed, 3 insertions(+), 8 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 4e9fed0..3152823 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,11 +1,5 @@
 libdbd-mysql-perl (4.046-1) UNRELEASED; urgency=medium
 
-  TODO:
-  - check if all the bugs, especially the CVEs are really fixed
-    (and maybe improve changelog entries about them)
-  - and looking at the recent history and open issues I'm a bit wary in
-    general ...
-
   [ Alex Muntada ]
   * Remove inactive pkg-perl members from Uploaders.
 
@@ -13,8 +7,9 @@ libdbd-mysql-perl (4.046-1) UNRELEASED; urgency=medium
   * New upstream version
     Fixes:
     - "Regression for zerofill columns" (Closes: #856250)
-    - "CVE-2017-10788" (Closes: #866818)
-    - "CVE-2017-10789" (Closes: #866821)
+    - "CVE-2017-10788: Use-after-free when calling mysql_stmt_error() after
+      mysql_stmt_close()" (Closes: #866818)
+    - "CVE-2017-10789: possible MITM attack when mysql_ssl=1" (Closes: #866821)
   * Bump Standards-Version to 4.1.3
   * Update regression-fix-float_type_conversion.patch
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libdbd-mysql-perl.git



More information about the Pkg-perl-cvs-commits mailing list