mysql-5.1.66-2.0.1.AXS4

エラータID: AXSA:2013-03:01

リリース日: 
2013/01/04 Friday - 21:11
題名: 
mysql-5.1.66-2.0.1.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- MySQL には GRANT FILE コマンドの長い引数によって，リモートの認証された攻撃者が任意のコードを実行できる脆弱性があります。 (CVE-2012-5611)

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2012-5611
Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.


追加情報: 

N/A

ダウンロード: 

SRPMS
  1. mysql-5.1.66-2.0.1.AXS4.src.rpm
    MD5: ae4267e7ae63738035b8caf22b5c3809
    SHA-256: 69bf51849abc83c3fabc42ed3b8acdd92540dfa1c53e38463eb8fbfdb17e1339
    Size: 19.97 MB

Asianux Server 4 for x86
  1. mysql-5.1.66-2.0.1.AXS4.i686.rpm
    MD5: 02d35d8c0298a50c5030858bb6b89eca
    SHA-256: b8b1ff8b45b66b5f9f7bb98235c7fb663af749ba7dbad3f69021387d30d4bd3e
    Size: 894.97 kB
  2. mysql-bench-5.1.66-2.0.1.AXS4.i686.rpm
    MD5: 6884b733394fc6b8e3c6dcff453b230c
    SHA-256: f49d505539d57fcee8f2020744e4c0f31f9c9f0a5421190162abbf2da3aaf158
    Size: 426.45 kB
  3. mysql-devel-5.1.66-2.0.1.AXS4.i686.rpm
    MD5: cf0d137fecabc1e17fef8b08fb5cd574
    SHA-256: 30fb131e2701e6e23b4dda5edeb9b4abba6ba064998e617fbd8f10ee5797eda1
    Size: 127.20 kB
  4. mysql-libs-5.1.66-2.0.1.AXS4.i686.rpm
    MD5: 90ced068c619d759c6252f8343c0f442
    SHA-256: 3afde38578e5998819d36a90cad90d23bf998f435d35a763a5ce0f625f2cd286
    Size: 1.23 MB
  5. mysql-server-5.1.66-2.0.1.AXS4.i686.rpm
    MD5: d81141a2054bf9a20c33a8f57e1b4703
    SHA-256: 202b7302e59eb8c889737c6656ca6ce6025840b8b124cc1d97a60a16225aee85
    Size: 8.78 MB
  6. mysql-test-5.1.66-2.0.1.AXS4.i686.rpm
    MD5: d3d3a1d785bb8d884e69552659add582
    SHA-256: 3c0e76a686e5999d94e041f31ef7ad8ec5464a057eb4f43e1471e90fd5e58d1c
    Size: 5.24 MB

Asianux Server 4 for x86_64
  1. mysql-5.1.66-2.0.1.AXS4.x86_64.rpm
    MD5: 26245a708db1834120c6ddf6ff500b02
    SHA-256: 56da418e54e50285736e0f5b49578f48180b5020bf7c37b8c383b5da0f5ac395
    Size: 884.11 kB
  2. mysql-bench-5.1.66-2.0.1.AXS4.x86_64.rpm
    MD5: 53e5e6f29c69c52fddc6294e7a1422aa
    SHA-256: c04cc331045ba3d18f3dda17956f78ef01259f181180e30db3e4e57e670fd4ab
    Size: 426.00 kB
  3. mysql-devel-5.1.66-2.0.1.AXS4.x86_64.rpm
    MD5: c6de785ce7da3de04b1ded1a19eab976
    SHA-256: de021d2fbacb52e066a7d2da3aa074337ea822b0549d071e09323949ff5b017f
    Size: 126.77 kB
  4. mysql-libs-5.1.66-2.0.1.AXS4.x86_64.rpm
    MD5: 58ce7dd5422abeaeb4db715c4baa5732
    SHA-256: 1653cbf0370e77603fdbc47b54b6cb4c6001ef74e77eb31ba9571026908a2581
    Size: 1.22 MB
  5. mysql-server-5.1.66-2.0.1.AXS4.x86_64.rpm
    MD5: 774e2792d5cae8934ab83ec0414faeb4
    SHA-256: a7b3529b58241fdfd0f5202e7636b1f502d3a9eb07eeef38d0ead0d7cd154d2c
    Size: 8.60 MB
  6. mysql-test-5.1.66-2.0.1.AXS4.x86_64.rpm
    MD5: 67bb2d0439dbd05f88f6489e329a0cc0
    SHA-256: 5e1c21c5730b351315b9132d16ea3bab0ecfbc658a59650f8d0758ab8fb81dcf
    Size: 5.26 MB
  7. mysql-devel-5.1.66-2.0.1.AXS4.i686.rpm
    MD5: cf0d137fecabc1e17fef8b08fb5cd574
    SHA-256: 30fb131e2701e6e23b4dda5edeb9b4abba6ba064998e617fbd8f10ee5797eda1
    Size: 127.20 kB
  8. mysql-libs-5.1.66-2.0.1.AXS4.i686.rpm
    MD5: 90ced068c619d759c6252f8343c0f442
    SHA-256: 3afde38578e5998819d36a90cad90d23bf998f435d35a763a5ce0f625f2cd286
    Size: 1.23 MB