Date: Tue, 17 Jul 2007 08:24:47 -0400
From: rPath Update Announcements <announce-noreply@rpath.com.>
To: [email protected],
Subject: rPSA-2007-0143-1 mysql mysql-bench mysql-server
Message-ID: <469cb50f.Lv6rqLqkugf8+nIh%[email protected]>
User-Agent: nail 11.22 3/20/05
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: antivirus-gw at tyumen.ru
rPath Security Advisory: 2007-0143-1
Published: 2007-07-17
Products: rPath Linux 1
Rating: Major
Exposure Level Classification:
Remote User Deterministic Denial of Service
Updated Versions:
mysql=/conary.rpath.com@rpl:devel//1/5.0.45-0.1-1
mysql-bench=/conary.rpath.com@rpl:devel//1/5.0.45-0.1-1
mysql-server=/conary.rpath.com@rpl:devel//1/5.0.45-0.1-1
References:
https://issues.rpath.com/browse/RPL-1536
http://lists.mysql.com/announce/470
Description:
Previous versions of the mysql package contain multiple
vulnerabilities, the most serious of which allows an
attacker to crash the mysql server (Denial of Service).
Other vulnerabilities allow users to gain escalated
privileges within the database server, including update
privileges.
Copyright 2007 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html
