Accepted mysql-dfsg 3.23.55-3 (i386 source all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Fri, 14 Mar 2003 19:09:41 +0100
Source: mysql-dfsg
Binary: mysql-client libmysqlclient10-dev mysql-server mysql-common libmysqlclient10
Architecture: source i386 all
Version: 3.23.55-3
Distribution: unstable
Urgency: high
Maintainer: Christian Hammers <ch@debian.org>
Changed-By: Christian Hammers <ch@debian.org>
Description:
libmysqlclient10 - mysql database client library
libmysqlclient10-dev - mysql database development files
mysql-client - mysql database client binaries
mysql-common - mysql database common files (e.g. /etc/mysql/my.cnf)
mysql-server - mysql database server binaries
Changes:
mysql-dfsg (3.23.55-3) unstable; urgency=high
.
* SECURITY:
.
MySQL is vulnerable to an attack where a user with "file_priv"
creates a config file in /var/lib/mysql/ using a "SELECT ... INTO
OUTFILE". As MySQL never overwrites files with this operation,
this attack is prevented by an automatically generated dummy file.
.
All versions of MySQL are affected.
Files:
84a8b43ce3b375d64febc6edca9b029d 882 misc optional mysql-dfsg_3.23.55-3.dsc
2a12247fa81af6c1fbfbac68ab27d9da 189946 misc optional mysql-dfsg_3.23.55-3.diff.gz
3178b89cc5a74dffcef6f767e38988ec 19320 misc optional mysql-common_3.23.55-3_all.deb
9f6d9fb8b33c2dbe24fba72e1f3393c7 241308 libs optional libmysqlclient10_3.23.55-3_i386.deb
1285c705c8d926fdb8ed60fa621b5d8d 599348 devel optional libmysqlclient10-dev_3.23.55-3_i386.deb
634ad62a2d9307a2f2e02c926fbd5044 126836 misc optional mysql-client_3.23.55-3_i386.deb
cd89bd49247aeae8c3f1b353e75cbcd1 3002232 misc optional mysql-server_3.23.55-3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iEYEARECAAYFAj5yLtsACgkQkR9K5oahGOZmFwCgsB0XCXGQG4VH2VDoi/pyTryF
uMMAoIoVvCqMujqE/R6Bj46+vyfj8Dbb
=dohI
-----END PGP SIGNATURE-----
Accepted:
libmysqlclient10-dev_3.23.55-3_i386.deb
to pool/main/m/mysql-dfsg/libmysqlclient10-dev_3.23.55-3_i386.deb
libmysqlclient10_3.23.55-3_i386.deb
to pool/main/m/mysql-dfsg/libmysqlclient10_3.23.55-3_i386.deb
mysql-client_3.23.55-3_i386.deb
to pool/main/m/mysql-dfsg/mysql-client_3.23.55-3_i386.deb
mysql-common_3.23.55-3_all.deb
to pool/main/m/mysql-dfsg/mysql-common_3.23.55-3_all.deb
mysql-dfsg_3.23.55-3.diff.gz
to pool/main/m/mysql-dfsg/mysql-dfsg_3.23.55-3.diff.gz
mysql-dfsg_3.23.55-3.dsc
to pool/main/m/mysql-dfsg/mysql-dfsg_3.23.55-3.dsc
mysql-server_3.23.55-3_i386.deb
to pool/main/m/mysql-dfsg/mysql-server_3.23.55-3_i386.deb
Reply to: