[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#970307: buster-pu: package node-mysql/2.16.0-1+deb10u1



Control: tags -1 + confirmed

On Mon, 2020-09-14 at 16:04 +0200, Xavier Guimard wrote:
> [ Reason ]
> node-mysql is vulnerable to CVE-2019-14939 (#934712)
> 
> [ Impact ]
> Default "LOAD DATA LOCAL INFILE" is too permissive
> 
> [ Tests ]
> Sadly tests were not enabled in buster
> 

I think the intention is also to describe how the patch was tested. :-)

Please go ahead.

Regards,

Adam


Reply to: