Format: 1.7 Date: Wed, 19 Mar 2008 15:18:09 -0400 Source: mysql-dfsg-5.0 Binary: libmysqlclient15-dev libmysqlclient15off mysql-client mysql-client-5.0 mysql-common mysql-server mysql-server-5.0 Architecture: amd64_translations amd64 hppa_translations hppa i386_translations all i386 ia64_translations ia64 lpia_translations lpia powerpc_translations powerpc source sparc_translations sparc Version: 5.0.45-1ubuntu3.3 Distribution: gutsy-security Urgency: low Maintainer: Ubuntu Core Developers Changed-By: Jamie Strandboge Description: libmysqlclient15-dev - MySQL database development files libmysqlclient15off - MySQL database client library mysql-client-5.0 - MySQL database client binaries mysql-server-5.0 - MySQL database server binaries mysql-client - MySQL database client (meta package depending on the latest versi mysql-common - MySQL database common files mysql-server - MySQL database server (meta package depending on the latest versi Changes: mysql-dfsg-5.0 (5.0.45-1ubuntu3.3) gutsy-security; urgency=low . * no change build for -security upload . mysql-dfsg-5.0 (5.0.45-1ubuntu3.2) gutsy-proposed; urgency=low . * SECURITY UPDATE: buffer overflow via ProcessOldClientHello() in handshake.cpp and input_buffer& operator>> in yassl_imp.cpp * SECURITY UPDATE: buffer overread in HASHwithTransform::Update in hash.cpp * debian/patches/95_SECURITY_CVE-2008-0226_0227.dpatch: properly verify length of input (LP: #186978) * SECURITY UPDATE: privilege escalation via crafted CREATE SQL SECURITY DEFINER VIEW and ALTER VIEW statements * debian/patches/96_SECURITY_CVE-2007-6303.dpatch: make sure lex->definer is non-NULL in sql_view.cc (LP: #185039) * debian/patches/97_view_fix-now.dpatch: update view.test and view.result to use a static year instead of now(). These tests are not part of the build but helps with qa-regression-testing * References CVE-2008-0226 CVE-2008-0227 CVE-2007-6303 Files: ef69b41293e87721bea00629af825def 34860 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.3_amd64_translations.tar.gz 0eca5631ce7f81bf245f51fe8eb89182 1916808 libs optional libmysqlclient15off_5.0.45-1ubuntu3.3_amd64.deb 436cdc0aafcb2ab153521ed63cea4027 7562478 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.3_amd64.deb 8abd871052f16b7e6d6d16ff4d3a9b28 7995304 misc optional mysql-client-5.0_5.0.45-1ubuntu3.3_amd64.deb 01a20860a015d9718a11f141ca0faca2 27571250 misc optional mysql-server-5.0_5.0.45-1ubuntu3.3_amd64.deb 403084c1aeb52b6dcd6fcfeae937bbc0 34858 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.3_hppa_translations.tar.gz 018a97cf0403342a2de831e0907daa1a 2000064 libs optional libmysqlclient15off_5.0.45-1ubuntu3.3_hppa.deb 1631fd9e2bc7ea6b422d1fbedee96e8b 8178896 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.3_hppa.deb ff98b0454015f0d8a5986bc93b6d0fd3 8373192 misc optional mysql-client-5.0_5.0.45-1ubuntu3.3_hppa.deb 0833007889fcf7d0ad0f4292686877eb 28638400 misc optional mysql-server-5.0_5.0.45-1ubuntu3.3_hppa.deb 9b38c4284c05e003744953da6c9529fc 56434 misc optional mysql-common_5.0.45-1ubuntu3.3_all.deb e9339c23ee2df4548f2eb71daba9280f 50440 misc optional mysql-server_5.0.45-1ubuntu3.3_all.deb a808aa7a4ad9089044af222c49eef7fe 48236 misc optional mysql-client_5.0.45-1ubuntu3.3_all.deb b460931ed898dc1acb84008121497545 34854 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.3_i386_translations.tar.gz bb37c12a7b59cbd08f9c090a5a24adde 1867226 libs optional libmysqlclient15off_5.0.45-1ubuntu3.3_i386.deb 0eca07140a4fc84f868103d07d7dd156 7042208 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.3_i386.deb f8b377e488a0f047b9cb911ec5487345 7494176 misc optional mysql-client-5.0_5.0.45-1ubuntu3.3_i386.deb f824fa09d29105e4bb215d58e25b7ee8 26788480 misc optional mysql-server-5.0_5.0.45-1ubuntu3.3_i386.deb 2ed7abf6942924e6f3c9759af48e0d68 34850 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.3_ia64_translations.tar.gz 577e6e9b63a396aa71da630464481c1a 2187182 libs optional libmysqlclient15off_5.0.45-1ubuntu3.3_ia64.deb 47460712cae439e2d5190624ef52a9bf 9925808 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.3_ia64.deb 603e5bff3f5b67f7b6f8b36f22b4e359 10773830 misc optional mysql-client-5.0_5.0.45-1ubuntu3.3_ia64.deb 2801a847dfa13b8d73f368e8613dc458 32120208 misc optional mysql-server-5.0_5.0.45-1ubuntu3.3_ia64.deb f9407e25ebe78a2b21fb775a6166a6fe 34852 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.3_lpia_translations.tar.gz 331dd7c5a7b6a006dc92ca277cb3b3be 1843458 libs optional libmysqlclient15off_5.0.45-1ubuntu3.3_lpia.deb adbbb80f7ab3cab6a30312805dd0c397 7022488 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.3_lpia.deb 32992f588fef41f0dc207949c5880cbe 7518010 misc optional mysql-client-5.0_5.0.45-1ubuntu3.3_lpia.deb 9ed2aaec589912c0fb3d58021382036b 26759598 misc optional mysql-server-5.0_5.0.45-1ubuntu3.3_lpia.deb df95a9c306261f2b7c676d624afbdba4 34859 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.3_powerpc_translations.tar.gz 898085f122cd0e06f3e3b8f93a23fb2b 1949058 libs optional libmysqlclient15off_5.0.45-1ubuntu3.3_powerpc.deb 757819563db4e7a62c79043bd792a58c 7760962 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.3_powerpc.deb 16764fa002697238ecde9c76a82cf52e 8063962 misc optional mysql-client-5.0_5.0.45-1ubuntu3.3_powerpc.deb 48cf4b03ab341e32626c975bd1bb1851 28021234 misc optional mysql-server-5.0_5.0.45-1ubuntu3.3_powerpc.deb 356792b5d95ea3741a3e8b7d50f01d99 1294 misc optional mysql-dfsg-5.0_5.0.45-1ubuntu3.3.dsc 6dc6f508f3075b440f5a503339e3902c 235063 misc optional mysql-dfsg-5.0_5.0.45-1ubuntu3.3.diff.gz 45b81ca3c95a760ebdf1042fd3e67d0d 34853 raw-translations - mysql-dfsg-5.0_5.0.45-1ubuntu3.3_sparc_translations.tar.gz ed2bf67905c38a61ea2556702ac79360 1877036 libs optional libmysqlclient15off_5.0.45-1ubuntu3.3_sparc.deb c8a3cc4f41404e68533e7637f8d5f502 7171518 libdevel optional libmysqlclient15-dev_5.0.45-1ubuntu3.3_sparc.deb 675baa5c5c8f5dbd0daa451927ac5185 7582516 misc optional mysql-client-5.0_5.0.45-1ubuntu3.3_sparc.deb 659efc3209f9a3be5c89b8ae3d05bb75 27138716 misc optional mysql-server-5.0_5.0.45-1ubuntu3.3_sparc.deb Launchpad-Bugs-Fixed: 185039 186978 Original-Maintainer: Debian MySQL Maintainers