Bug#934712: node-mysql: CVE-2019-14939 - Issue closed uptream without changes

2019-08-19 Thread Xavier
Control: tags -1 - fixed-upstream Control: tags -1 + moreinfo Hi all, remote issue[1] was closed without any change in a "locked and limited to collaborators conversation" Title changed from "LOAD DATA LOCAL INFILE option shouldn't be open by default." to "Question" Mitre issue isn't updated

Bug#934712: node-mysql: CVE-2019-14939

2019-08-13 Thread Salvatore Bonaccorso
Source: node-mysql Version: 2.16.0-2 Severity: important Tags: security upstream Forwarded: https://github.com/mysqljs/mysql/issues/2257 Hi, The following vulnerability was published for node-mysql. I'm opening this bug for now mainly for tracking. The upstream issue got locked down and the origi