mysql-5.0.77-4.3.0.1.AXS3

エラータID: AXSA:2010-290:03

Release date: 
Friday, May 28, 2010 - 15:29
Subject: 
mysql-5.0.77-4.3.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the MySQL client programs, the client shared libraries, and generic MySQL files.
Security issues fixed with this release:
CVE-2010-1626
MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008 7247.
CVE-2010-1848
CVE-2010-1850
No information at the time of writing, please see the CVE links below for up-to-date information.

Solution: 

Update packages.

CVEs: 
CVE-2010-1626
MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.
CVE-2010-1848
Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.
CVE-2010-1850
Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.




Additional Info: 

N/A

Download: 

SRPMS
  1. mysql-5.0.77-4.3.0.1.AXS3.src.rpm
    MD5: a3d3359d60918adedea35b1e889fcd5b
    SHA-256: 0dae0c0bcd4912cb9e601da986fcd45f38439775c8dce91368f64285fcdec767
    Size: 32.71 MB

Asianux Server 3 for x86
  1. mysql-5.0.77-4.3.0.1.AXS3.i386.rpm
    MD5: f9f7b53f346fa210237a23883bc3a297
    SHA-256: 4a74c9ea4ae60d274f60165a815cfc6edd663acacf912e9d8dd7e614aed90055
    Size: 4.75 MB
  2. mysql-bench-5.0.77-4.3.0.1.AXS3.i386.rpm
    MD5: 63069eda52ffbff0d5f6790a2ac9ac4f
    SHA-256: a417f01c13e2ad8b93c5adacb1367f83e10d71321fd5c69e577c4da8eb41d83a
    Size: 509.83 kB
  3. mysql-devel-5.0.77-4.3.0.1.AXS3.i386.rpm
    MD5: 4eab8a800fdac442fb365aa227cf388d
    SHA-256: c4eec20d276112ccd5a207fb911688d1fdec51165b620d673f8bab5aa8fc7b86
    Size: 2.43 MB
  4. mysql-server-5.0.77-4.3.0.1.AXS3.i386.rpm
    MD5: 7cd19ed63f0756d8918a01318352688e
    SHA-256: 8a34dcce77a80aeccdb9da8480e29bbaa8bbb1f5a384360bd71afac670d839dd
    Size: 9.78 MB

Asianux Server 3 for x86_64
  1. mysql-5.0.77-4.3.0.1.AXS3.x86_64.rpm
    MD5: 3c72883d9dd58c512ddd643fdffb804a
    SHA-256: 2f0b2da91c9215c7f6bb33783f8e590c5930ab3d6da88ee455c901cd98d6cd48
    Size: 4.76 MB
  2. mysql-bench-5.0.77-4.3.0.1.AXS3.x86_64.rpm
    MD5: 2788e295a299613b0172f216ef874216
    SHA-256: 30b05d807109ddd35df3b2242d3a3dddf8a5ba0719a5e4d1cc8cfcee7a70746c
    Size: 509.78 kB
  3. mysql-devel-5.0.77-4.3.0.1.AXS3.x86_64.rpm
    MD5: 64adbe1dbd2987451f09aeb6d1475e63
    SHA-256: 58ac1c88bd9f1bc8e3cca60c852d3b3a04784f3adaa393b931c2e20bb2555b9d
    Size: 2.47 MB
  4. mysql-server-5.0.77-4.3.0.1.AXS3.x86_64.rpm
    MD5: cccebe5cc13dca417e7eb9cf0b78652b
    SHA-256: 807dc7cb271dccf19889d455af01093b3842bbe41e961dd70b3d51b79e186138
    Size: 9.84 MB