Re: mysql-server-5.0: 5.0.32-7~bpo.1 vs 5.0.32-7etch1 (CVE-2007-1420)

To: backports-users@lists.backports.org
Subject: Re: mysql-server-5.0: 5.0.32-7~bpo.1 vs 5.0.32-7etch1 (CVE-2007-1420)
From: Norbert Tretkowski <norbert@tretkowski.de>
Date: Mon, 23 Apr 2007 22:28:17 +0200
Message-id: <[🔎] 1177360097.5922.0.camel@kyllikki.home.inittab.de>
In-reply-to: <[🔎] 20070423143134.GA21889@phys.ethz.ch>
References: <[🔎] 20070423143134.GA21889@phys.ethz.ch>

Am Montag, den 23.04.2007, 16:31 +0200 schrieb Axel Beckert:
> don't know if just just oversaw it or if it's a time problem, but
> mysql-server-5.0 in Sarge BPO (5.0.32-7~bpo.1) is vulnerable to
> CVE-2007-1420[1] (database crash DoS via subselects), while the
> version in Etch is fixed (5.0.32-7etch1) since 22-Mar-2007[2].

I'll upload a fix tomorrow.

	Norbert

Reply to:

References:
- mysql-server-5.0: 5.0.32-7~bpo.1 vs 5.0.32-7etch1 (CVE-2007-1420)
  - From: Axel Beckert <beckert@phys.ethz.ch>

Prev by Date: mysql-server-5.0: 5.0.32-7~bpo.1 vs 5.0.32-7etch1 (CVE-2007-1420)
Next by Date: Re: New user requests and etch-bpo
Previous by thread: mysql-server-5.0: 5.0.32-7~bpo.1 vs 5.0.32-7etch1 (CVE-2007-1420)
Next by thread: Version strings for backports
Index(es):
- Date
- Thread