rPSA-2007-0143-2 mysql mysql-bench mysql-server

[rPath Update Announcements]

rPath Security Advisory: 2007-0143-2
Published: 2007-07-17
Updated:
    2007-08-13 CVE-2007-3782 has been assigned.
Products: rPath Linux 1
Rating: Major
Exposure Level Classification:
    Remote User Deterministic Denial of Service
Updated Versions:
    mysql=/conary.rpath.com at rpl:devel//1/5.0.45-0.1-1
    mysql-bench=/conary.rpath.com at rpl:devel//1/5.0.45-0.1-1
    mysql-server=/conary.rpath.com at rpl:devel//1/5.0.45-0.1-1

References:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3782
    https://issues.rpath.com/browse/RPL-1536
    http://lists.mysql.com/announce/470

Description:
    Previous versions of the mysql package contain multiple
    vulnerabilities, the most serious of which allows an
    attacker to crash the mysql server (Denial of Service).
    Other vulnerabilities allow users to gain escalated
    privileges within the database server, including update
    privileges.
    
    13 August 2007 Update: CVE-2007-3782 has been assigned
    for one of the vulnerabilities addressed by this update.

Copyright 2007 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html