Branch: refs/heads/master
  Home:   https://github.com/perl5-dbi/dbi
  Commit: e9742ef85a75867cbd696860e3bf3e32b681f98d
      
https://github.com/perl5-dbi/dbi/commit/e9742ef85a75867cbd696860e3bf3e32b681f98d
  Author: Robert Rothenberg <[email protected]>
  Date:   2026-07-11 (Sat, 11 Jul 2026)

  Changed paths:
    M lib/DBI/SQL/Nano.pm
    M t/50dbm_simple.t

  Log Message:
  -----------
  Fix inverted SQL comparisons for strings (CVE-2026-15043)

The <= operator used `ge` and the >= operator used `le`.

Note that this bug has existed since DBI::SQL::Nano was added in DBI 1.42.


  Commit: 44b6b2c4af6993cce19557102656c12e828add54
      
https://github.com/perl5-dbi/dbi/commit/44b6b2c4af6993cce19557102656c12e828add54
  Author: Robert Rothenberg <[email protected]>
  Date:   2026-07-11 (Sat, 11 Jul 2026)

  Changed paths:
    M lib/DBI/SQL/Nano.pm
    M t/50dbm_simple.t

  Log Message:
  -----------
  Document that DBI::SQL::Nano matches IS NULL against empty strings


  Commit: 1e76e4a8fea0479d0b798193337076ccf82f31fb
      
https://github.com/perl5-dbi/dbi/commit/1e76e4a8fea0479d0b798193337076ccf82f31fb
  Author: Robert Rothenberg <[email protected]>
  Date:   2026-07-11 (Sat, 11 Jul 2026)

  Changed paths:
    M ChangeLog

  Log Message:
  -----------
  Update ChaneLog


  Commit: 5d3035fc23f106d7a1b4c8de45f9406ae57e147d
      
https://github.com/perl5-dbi/dbi/commit/5d3035fc23f106d7a1b4c8de45f9406ae57e147d
  Author: Robert Rothenberg <[email protected]>
  Date:   2026-07-11 (Sat, 11 Jul 2026)

  Changed paths:
    M ChangeLog
    M lib/DBI/SQL/Nano.pm
    M t/50dbm_simple.t

  Log Message:
  -----------
  Merge commit from fork

Fix CVE-2026-15043


Compare: https://github.com/perl5-dbi/dbi/compare/a930b1a9ddda...5d3035fc23f1

To unsubscribe from these emails, change your notification settings at 
https://github.com/perl5-dbi/dbi/settings/notifications

Reply via email to