Sunday, August 25, 2024

Re: [security update]databases/p5-DBI: Update to 1.644

On Sun, Aug 25, 2024 at 02:46:32AM +0000, wen heping wrote:
> Hi,
>
> Here is a patch for databases/p5-DBI to update to 1.644.
> Upstream changelog say "Fix CVE-2014-10401 and CVE-2014-10402".
> It build well and pass the test on amd64-current system.
>
>
> Best Regards,
> wen

I was a bit surprised to see such old CVEs only fixed now, then I looked
them all, they're very specific, and if you're not using f_dir in incorrect
ways, you're fine. They mostly fix broken config with f_dir.

(of course this needs to be fixed anyhow)

No comments:

Post a Comment