Fedora alert FEDORA-2010-9053 (mysql)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 12 Update: mysql-5.1.47-1.fc12 | |
| Date: | Mon, 07 Jun 2010 22:28:04 +0000 | |
| Message-ID: | <20100607222804.40AEE10FD1C@bastion02.phx2.fedoraproject.org> | |
| Archive‑link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-9053 2010-05-25 18:11:09 -------------------------------------------------------------------------------- Name : mysql Product : Fedora 12 Version : 5.1.47 Release : 1.fc12 URL : http://www.mysql.com Summary : MySQL client programs and shared libraries Description : MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. -------------------------------------------------------------------------------- Update Information: Update to MySQL 5.1.47, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850 In F13, also create mysql group explicitly in pre-server script, to ensure correct GID -------------------------------------------------------------------------------- ChangeLog: * Mon May 24 2010 Tom Lane <tgl@redhat.com> 5.1.47-1 - Update to MySQL 5.1.47, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850 Resolves: #592862 Resolves: #583717 * Sat Apr 24 2010 Tom Lane <tgl@redhat.com> 5.1.46-1 - Update to MySQL 5.1.46, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html * Thu Mar 25 2010 Tom Lane <tgl@redhat.com> 5.1.45-2 - Fix multiple problems described in upstream bug 52019, because regression tests fail on PPC if we don't. * Wed Mar 24 2010 Tom Lane <tgl@redhat.com> 5.1.45-1 - Update to MySQL 5.1.45, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html * Sat Feb 20 2010 Tom Lane <tgl@redhat.com> 5.1.44-1 - Update to MySQL 5.1.44, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html - Remove mysql.info, which is not freely redistributable Resolves: #560181 - Revert broken upstream fix for their bug 45058 Resolves: #566547 * Fri Feb 12 2010 Tom Lane <tgl@redhat.com> 5.1.43-1 - Update to MySQL 5.1.43, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html * Fri Jan 29 2010 Tom Lane <tgl@redhat.com> 5.1.42-7 - Add backported patch for CVE-2008-7247 (upstream bug 39277) Related: #543619 - Use non-expired certificates for SSL testing (upstream bug 50702) - Emit explicit error message if user tries to build RPM as root Related: #558915 - Correct Source0: tag and comment to reflect how to get the tarball - Add comment suggesting disabling symbolic links in /etc/my.cnf Related: #553652 - Change %define to %global, per packaging guidelines * Sat Jan 2 2010 Tom Lane <tgl@redhat.com> 5.1.42-2 - Disable building the innodb plugin; it tickles assorted gcc bugs and doesn't seem entirely ready for prime time anyway. * Fri Jan 1 2010 Tom Lane <tgl@redhat.com> 5.1.42-1 - Update to MySQL 5.1.42, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages Resolves: #547485 * Thu Dec 17 2009 Tom Lane <tgl@redhat.com> 5.1.41-2 - Update to MySQL 5.1.41, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html including fixes for CVE-2009-4019 Related: #540906 - Stop waiting during "service mysqld start" if mysqld_safe exits Resolves: #544095 * Tue Nov 10 2009 Tom Lane <tgl@redhat.com> 5.1.40-1 - Update to MySQL 5.1.40, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html - Do not force the --log-error setting in mysqld init script Resolves: #533736 -------------------------------------------------------------------------------- References: [ 1 ] Bug #592079 - CVE-2010-1848 mysql: multiple insufficient table name checks https://bugzilla.redhat.com/show_bug.cgi?id=592079 [ 2 ] Bug #592086 - CVE-2010-1849 mysql: over-sized packet denial of service vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=592086 [ 3 ] Bug #592091 - CVE-2010-1850 mysql: COM_FIELD_LIST table name buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=592091 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mysql' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...