mysql-5.1.67-1.0.1.AXS4
エラータID: AXSA:2013-100:02
リリース日:
2013/03/01 Friday - 18:46
題名:
mysql-5.1.67-1.0.1.AXS4
影響のあるチャネル:
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Oracle MySQL の Server コンポーネントには詳細不明の脆弱性が存在し，InnoDB に関連する詳細不明の要因によって，リモートの認証された攻撃者が任意のコードを実行する脆弱性があります。(CVE-2012-0572)
- Oracle MySQL の Server コンポーネントには詳細不明の脆弱性が存在し，リモートの認証された攻撃者が可用性に影響を及ぼす脆弱性があります。(CVE-2012-0574)
- Oracle MySQL の Server コンポーネントには詳細不明の脆弱性が存在し，リモートの攻撃者が可用性に影響を及ぼす脆弱性があります。(CVE-2012-1702)
- Oracle MySQL の Server コンポーネントには詳細不明の脆弱性が存在し，Server Optimizer に関連する要因によって，リモートの認証された攻撃者が詳細不明の影響を及ぼす脆弱性があります。(CVE-2012-1705)
- Oracle MySQL の Server コンポーネントには詳細不明の脆弱性が存在し，サーバのレプリケーションに関連する要因によって，リモートの認証された攻撃者が機密性，整合性に影響を及ぼす脆弱性があります。(CVE-2012-0375)
- Oracle MySQL の Server コンポーネントには詳細不明の脆弱性が存在し，サーバのロックに関連する要因によって，リモートの攻撃者が可用性に影響を及ぼす脆弱性があります。(CVE-2013-0383)
- Oracle MySQL の Server コンポーネントには詳細不明の脆弱性が存在し，インフォメーションスキーマに関連する要因によって，リモートの認証された攻撃者が可用性に影響を及ぼす脆弱性があります。(CVE-2013-0384)
- Oracle MySQL の Server コンポーネントには詳細不明の脆弱性が存在し，サーバのレプリケーションに関連する要因によって，ローカルのユーザが機密性，整合性に影響を及ぼす脆弱性があります。(CVE-2013-0385)
- Oracle MySQL の Server コンポーネントには詳細不明の脆弱性が存在し，Server Optimizer に関連する要因によって，リモートの認証された攻撃者が可用性に影響を及ぼす脆弱性があります。(CVE-2012-0389)
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2012-0572
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVE-2012-0574
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors.
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors.
CVE-2012-1702
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote attackers to affect availability via unknown vectors.
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote attackers to affect availability via unknown vectors.
CVE-2012-1705
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVE-2013-0375
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.
CVE-2013-0383
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote attackers to affect availability via unknown vectors related to Server Locking.
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote attackers to affect availability via unknown vectors related to Server Locking.
CVE-2013-0384
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Information Schema.
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Information Schema.
CVE-2013-0385
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users to affect confidentiality and integrity via unknown vectors related to Server Replication.
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users to affect confidentiality and integrity via unknown vectors related to Server Replication.
CVE-2013-0389
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
追加情報:
N/A
ダウンロード:
SRPMS
- mysql-5.1.67-1.0.1.AXS4.src.rpm
MD5: db20c4cb12beb1c796be8b7cba57317c
SHA-256: ff9f1e94934436d09c322ab792121cc727ac18f2ae1327a65bf7de6616b06625
Size: 19.97 MB
Asianux Server 4 for x86
- mysql-5.1.67-1.0.1.AXS4.i686.rpm
MD5: 0659667c157136e726401b46333d4c6f
SHA-256: 7b08956687ce296f0d8a3cfe2ebedcf1777c9d7bdc163a33e41173c84a777678
Size: 896.09 kB - mysql-bench-5.1.67-1.0.1.AXS4.i686.rpm
MD5: 14e70ada2019eb0e55f57aaf2ebde380
SHA-256: 0109ca91be60dc8dc34bc447cd526fb63c6debe840a84261cd7efcc85cabd033
Size: 426.66 kB - mysql-devel-5.1.67-1.0.1.AXS4.i686.rpm
MD5: 79d07ae8601f6d9a5f178049c7c968fe
SHA-256: 93cada62e54e5bd658d5aeca8edfb233ce0f1a5b9c13c51dcee719af2ed3568a
Size: 127.34 kB - mysql-libs-5.1.67-1.0.1.AXS4.i686.rpm
MD5: b544b26a68203067ce5d9c7c54ed2bfe
SHA-256: 2765b24e1a5192d28b4a1b1583fb7cbabe5235d58c2cc8fae4ea6c451d8e7db4
Size: 1.23 MB - mysql-server-5.1.67-1.0.1.AXS4.i686.rpm
MD5: b127d699adde72ba53d747ac64966e03
SHA-256: 32bbfee8af0a70ff66c85a3f48105c6b68bf354bef2af81bd5df3107dff79526
Size: 8.78 MB - mysql-test-5.1.67-1.0.1.AXS4.i686.rpm
MD5: 26486152cd5bda55108ac4ae3748c00d
SHA-256: d65a73cd24ff79fcecaa913bb1ce74cf25d0e406f8c5389baa17df25254da00d
Size: 5.25 MB
Asianux Server 4 for x86_64
- mysql-5.1.67-1.0.1.AXS4.x86_64.rpm
MD5: 2e7cbeb28229a8873259365c4b26312f
SHA-256: 986e9ac3511d20bb6e3884b1059046291a47e544b92b4df7b966e7e1dc2d07b9
Size: 885.02 kB - mysql-bench-5.1.67-1.0.1.AXS4.x86_64.rpm
MD5: 786af52133774beaa89358a3957327fa
SHA-256: 885c9297acf851cf571eb7193793b8fde49b6d43075768bc0fcb9608648f96d1
Size: 426.15 kB - mysql-devel-5.1.67-1.0.1.AXS4.x86_64.rpm
MD5: c83896f80941d8a231be2796f63d4607
SHA-256: b22dbd86e8252f75e12d7b46e6e02169094e76bf40dc584788a120d5420323a6
Size: 126.92 kB - mysql-libs-5.1.67-1.0.1.AXS4.x86_64.rpm
MD5: aea8009f911420694e19131c63ba32a5
SHA-256: 0bf1b3c408621330a0c081fe0a2cb9b9c9be22e23ad4d8643ca9431f36801750
Size: 1.22 MB - mysql-server-5.1.67-1.0.1.AXS4.x86_64.rpm
MD5: 5731bb3830f40da21839cb827143f000
SHA-256: 86f58f771d95243b4d8a55df0f9cf39c25f39917c3dab9ad54b399b0a020d787
Size: 8.60 MB - mysql-test-5.1.67-1.0.1.AXS4.x86_64.rpm
MD5: 8b98c9e140e73951e4961d24851ab680
SHA-256: dca825d9be898c1a2e1923111b843a4f887d036e57e46224901c35d7add157f7
Size: 5.26 MB - mysql-devel-5.1.67-1.0.1.AXS4.i686.rpm
MD5: 79d07ae8601f6d9a5f178049c7c968fe
SHA-256: 93cada62e54e5bd658d5aeca8edfb233ce0f1a5b9c13c51dcee719af2ed3568a
Size: 127.34 kB - mysql-libs-5.1.67-1.0.1.AXS4.i686.rpm
MD5: b544b26a68203067ce5d9c7c54ed2bfe
SHA-256: 2765b24e1a5192d28b4a1b1583fb7cbabe5235d58c2cc8fae4ea6c451d8e7db4
Size: 1.23 MB