|
|
| |
|
| |
mysql-ocaml: missing escape function
| Package(s): | mysql-ocaml |
CVE #(s): | CVE-2009-2942
|
| Created: | October 15, 2009 |
Updated: | November 10, 2009 |
| Description: |
From the Debian advisory:
It was discovered that mysql-ocaml, OCaml bindings for MySql, was
missing a function to call mysql_real_escape_string(). This is needed,
because mysql_real_escape_string() honours the charset of the connection
and prevents insufficient escaping, when certain multibyte character
encodings are used. The added function is called real_escape() and
takes the established database connection as a first argument. The old
escape_string() was kept for backwards compatibility.
|
| Alerts: |
|
( Log in to post comments)
|
|
|