--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2020-f30298614a
2020-09-25 17:46:08.775727
--------------------------------------------------------------------------------Name        : perl-DBI
Product     : Fedora 31
Version     : 1.643
Release     : 3.fc31
URL         : https://dbi.perl.org/
Summary     : A database access API for perl
Description :
DBI is a database access Application Programming Interface (API) for
the Perl Language. The DBI API Specification defines a set of
functions, variables and conventions that provide a consistent
database interface independent of the actual database being used.

--------------------------------------------------------------------------------Update Information:

This release fixes CVE-2020-14392 (a memory corruption in XS functions when Perl
stack is reallocated), CVE-2019-20919 (a NULL profile dereference in
dbi_profile()), a documentation that old API functions are vulnerable to an
overflow, and CVE-2020-14393 (a buffer overlfow on an overlong DBD class name).
It also adds a missing dependency on FileHandle Perl module.
--------------------------------------------------------------------------------ChangeLog:

* Thu Mar 12 2020 Jitka Plesnikova  - 1.643-3
- Add BR: perl(FileHandle)
* Mon Feb 10 2020 Petr Pisar  - 1.643-2
- Build-require blib for tests
* Wed Feb  5 2020 Jitka Plesnikova  - 1.643-1
- 1.643 bump
* Tue Feb  4 2020 Tom Stellard  - 1.642-6
- Spec file cleanups: Use make_build and make_install macros
- https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
- https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1877402 - CVE-2020-14392 perl-dbi: Memory corruption in XS functions when Perl stack is reallocated
        https://bugzilla.redhat.com/show_bug.cgi?id=1877402
  [ 2 ] Bug #1877405 - CVE-2019-20919 perl-dbi: NULL profile dereference in dbi_profile()
        https://bugzilla.redhat.com/show_bug.cgi?id=1877405
  [ 3 ] Bug #1877409 - CVE-2020-14393 perl-dbi: Buffer overflow on an overlong DBD class name
        https://bugzilla.redhat.com/show_bug.cgi?id=1877409
  [ 4 ] Bug #1877421 - perl-dbi: Old API functions vulnerable to overflow
        https://bugzilla.redhat.com/show_bug.cgi?id=1877421
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-f30298614a' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/