Format: 1.7 Date: Wed, 19 Dec 2007 13:43:43 +0000 Source: mysql-dfsg-5.0 Binary: libmysqlclient15-dev libmysqlclient15off mysql-client mysql-client-5.0 mysql-common mysql-server mysql-server-5.0 Architecture: amd64_translations amd64 hppa_translations hppa i386_translations all i386 ia64_translations ia64 lpia_translations lpia powerpc_translations powerpc source sparc_translations sparc Version: 5.0.45-1ubuntu3.1 Distribution: gutsy-security Urgency: low Maintainer: Jamie Strandboge Changed-By: Jamie Strandboge Description: libmysqlclient15-dev - MySQL database development files libmysqlclient15off - MySQL database client library mysql-client-5.0 - MySQL database client binaries mysql-server-5.0 - MySQL database server binaries mysql-client - MySQL database client (meta package depending on the latest versi mysql-common - MySQL database common files mysql-server - MySQL database server (meta package depending on the latest versi Changes: mysql-dfsg-5.0 (5.0.45-1ubuntu3.1) gutsy-security; urgency=low . * SECURITY UPDATE: denial of service via crafted CONTAINS operation when using InnoDB * debian/patches/91_SECURITY_CVE-2007-5925.dpatch: make sure innodb returns error on unsupported operations (db0err.h, page0cur.h, ha_innodb.cc) * SECURITY UPDATE: privilege escalation using symlinks when using DATA DIRECTORY and INDEX DIRECTORY options via a RENAME TABLE statement * debian/patches/92_SECURITY_CVE-2007-5969.dpatch: fix for my_symlink2.c to properly check symlinks when performing a rename operation * SECURITY UPDATE: denial of service via SHOW TABLE STATUS query in federated engine * debian/patches/94_SECURITY_CVE-2007-6304.dpatch: fix for ha_federated.cc to to return error if the response doesn't have enough columns * References CVE-2007-5925 CVE-2007-5969 CVE-2007-6304 LP #172260 Files: 16b9b9213bc9e07fa7bc3b8ee076c137 1916426 libs optional libmysqlclient15off_5.0.45-1ubuntu3.1_amd64.deb 594eca4cca9385eafd1c8b7ccd0c174c 7561574 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.1_amd64.deb f6e3fc5e491b48f35d9c9a56a13f9c98 7993858 misc optional mysql-client-5.0_5.0.45-1ubuntu3.1_amd64.deb 75beac5263e4ffcbf22dbec2c5e32367 27569922 misc optional mysql-server-5.0_5.0.45-1ubuntu3.1_amd64.deb d9dbd76c60e43ba8d2db4c8ad049bb14 36047 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.1_amd64_translations.tar.gz 9b12d832a016416c5e2b2ba866eed3e8 1999458 libs optional libmysqlclient15off_5.0.45-1ubuntu3.1_hppa.deb d9d60106c0bcf5ae46363822219e9560 8177774 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.1_hppa.deb 833dea0b043d480db467c67ff5d83ce1 8372806 misc optional mysql-client-5.0_5.0.45-1ubuntu3.1_hppa.deb 5b10da95340de8f88836a705159e872e 28633866 misc optional mysql-server-5.0_5.0.45-1ubuntu3.1_hppa.deb 826f8dca21a1a52c753346ea66b408be 36056 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.1_hppa_translations.tar.gz f9ba8c213cd4acd2e746133dd003cd17 56096 misc optional mysql-common_5.0.45-1ubuntu3.1_all.deb 06643f8a4e1e32fc0a2553c014f41a34 50086 misc optional mysql-server_5.0.45-1ubuntu3.1_all.deb 8c3203d2e059fa8b12eec99477182e84 47882 misc optional mysql-client_5.0.45-1ubuntu3.1_all.deb 567166d11abc1840940d27e3c8d1f1ef 36047 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.1_i386_translations.tar.gz 276490a6631383da38fd29646c6dc59a 1866558 libs optional libmysqlclient15off_5.0.45-1ubuntu3.1_i386.deb ea800c66c62fb0f4104f146922f50ea5 7041790 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.1_i386.deb 69b7c57e96c3d29c6b1c4578da4b140f 7492504 misc optional mysql-client-5.0_5.0.45-1ubuntu3.1_i386.deb b14cc79dffd9a275b96bd7adab684908 26790230 misc optional mysql-server-5.0_5.0.45-1ubuntu3.1_i386.deb ee2371e1cfccf1a4994dd9ca7eb38a3c 2186330 libs optional libmysqlclient15off_5.0.45-1ubuntu3.1_ia64.deb aa8f370ac4cc8023a4fbb8753b1a3ea8 9925862 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.1_ia64.deb c7378ea3b50236b1892f087d4ed2b43e 10770774 misc optional mysql-client-5.0_5.0.45-1ubuntu3.1_ia64.deb bef05e656fc1262e6be15f8797e9d51b 32118384 misc optional mysql-server-5.0_5.0.45-1ubuntu3.1_ia64.deb d86a4d9ed350bbae2d1b422b271f6c71 36047 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.1_ia64_translations.tar.gz f055fb3ec43e5b1c370576872ea84f1f 1842804 libs optional libmysqlclient15off_5.0.45-1ubuntu3.1_lpia.deb 20249f7363bf91ba4eb5c8ecc7d5609a 7021636 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.1_lpia.deb dcae4fa44a002cdd3f82713d4a5726d6 7516984 misc optional mysql-client-5.0_5.0.45-1ubuntu3.1_lpia.deb 1767a33796464ae6579a46a20439480e 26759414 misc optional mysql-server-5.0_5.0.45-1ubuntu3.1_lpia.deb 27f19d61c2224c1f465ed1d395b0c134 36049 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.1_lpia_translations.tar.gz 33d46b210ff86729e1935dd5b9ce4282 1948396 libs optional libmysqlclient15off_5.0.45-1ubuntu3.1_powerpc.deb 9dd75562723b8f1538c8bd8bf9367488 7760452 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.1_powerpc.deb 5bcfc4169e092cd96cf15f04e59a7aa4 8062892 misc optional mysql-client-5.0_5.0.45-1ubuntu3.1_powerpc.deb 301db28c2cd5bff8ec8ee744f98244bb 28019590 misc optional mysql-server-5.0_5.0.45-1ubuntu3.1_powerpc.deb b3639df2d9488da2f448839c45ebee41 36052 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.1_powerpc_translations.tar.gz 7c1ea6a3f11cbbc789b0ce04b6c7cab6 1294 misc optional mysql-dfsg-5.0_5.0.45-1ubuntu3.1.dsc f86c497381e85035d01e960984463744 226879 misc optional mysql-dfsg-5.0_5.0.45-1ubuntu3.1.diff.gz 2dedeeb2044860de9ecd27d916d84a25 1876020 libs optional libmysqlclient15off_5.0.45-1ubuntu3.1_sparc.deb bd107418a5eb151e04f7e84588d93a5c 7170918 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.1_sparc.deb ad3059820781ba974181633c111925bc 7581194 misc optional mysql-client-5.0_5.0.45-1ubuntu3.1_sparc.deb 7958e87a59ce7a6d93eed492fa9bd2cf 27136130 misc optional mysql-server-5.0_5.0.45-1ubuntu3.1_sparc.deb 631786c399e4c742124609d1740c2f48 36047 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.1_sparc_translations.tar.gz Original-Maintainer: Debian MySQL Maintainers