Nom du paquet
mysql
Date
2009-07-27
Advisory ID
MDVSA-2009:159
Affected versions
2009.0 x86_64 , 2009.0 i586 , CS4.0 i586 , CS4.0 x86_64 , 2008.1 x86_64 , 2008.1 i586

Problem description

A vulnerability has been found and corrected in mysql:

Multiple format string vulnerabilities in the dispatch_command function
in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow
remote authenticated users to cause a denial of service (daemon crash)
and possibly have unspecified other impact via format string specifiers
in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request.
NOTE: some of these details are obtained from third party information
(CVE-2009-2446).

This update provides fixes for this vulnerability.

Updated packages

2009.0 x86_64

 96d17c2e7d0f687e560408318bc4bb20  2009.0/x86_64/lib64mysql15-5.0.84-0.2mdv2009.0.x86_64.rpm
 e93a2aa64a311c4e73b27a673562065f  2009.0/x86_64/lib64mysql-devel-5.0.84-0.2mdv2009.0.x86_64.rpm
 c6d39ceeb9da025e8826ae4f6f923c0e  2009.0/x86_64/lib64mysql-static-devel-5.0.84-0.2mdv2009.0.x86_64.rpm
 ed0ce425ab15be6634d920c3ffcbbbea  2009.0/x86_64/mysql-5.0.84-0.2mdv2009.0.x86_64.rpm
 2ea3cdd5e28a55e90807cf8f6e6c5d3f  2009.0/x86_64/mysql-bench-5.0.84-0.2mdv2009.0.x86_64.rpm
 7a8561ea92a9a7f0fe143150a17fa5f1  2009.0/x86_64/mysql-client-5.0.84-0.2mdv2009.0.x86_64.rpm
 f5a5087df04f186e0f9182b09341b890  2009.0/x86_64/mysql-common-5.0.84-0.2mdv2009.0.x86_64.rpm
 fe07c0ecffe297f10c9222426726b95a  2009.0/x86_64/mysql-doc-5.0.84-0.2mdv2009.0.x86_64.rpm
 c66db51ab2cd89b03ea9d5b9a3dc5f5b  2009.0/x86_64/mysql-max-5.0.84-0.2mdv2009.0.x86_64.rpm
 d4e14940c621ad3e1eb3ed0f64420914  2009.0/x86_64/mysql-ndb-extra-5.0.84-0.2mdv2009.0.x86_64.rpm
 a5bbe12755b6806496af42b8d35adb1e  2009.0/x86_64/mysql-ndb-management-5.0.84-0.2mdv2009.0.x86_64.rpm
 6e22d8f4b91cd5f3e4c74ecf9a6b3fe2  2009.0/x86_64/mysql-ndb-storage-5.0.84-0.2mdv2009.0.x86_64.rpm
 06b51526843f1b5fcaec98de6466839b  2009.0/x86_64/mysql-ndb-tools-5.0.84-0.2mdv2009.0.x86_64.rpm 
 d2c6899e2d639e0a46d8468bc84454ac  2009.0/SRPMS/mysql-5.0.84-0.2mdv2009.0.src.rpm

2009.0 i586

 1e1a4b7883da6c70286855443dda32cb  2009.0/i586/libmysql15-5.0.84-0.2mdv2009.0.i586.rpm
 7380d8d6c3f80d79bd4be3bef6b113de  2009.0/i586/libmysql-devel-5.0.84-0.2mdv2009.0.i586.rpm
 0c8154607d3aac68a8d282230d887990  2009.0/i586/libmysql-static-devel-5.0.84-0.2mdv2009.0.i586.rpm
 d00b5d9c4c4b6b78a107a3cdcb00a547  2009.0/i586/mysql-5.0.84-0.2mdv2009.0.i586.rpm
 3feacd18010b9330fe33e491a30fa9c0  2009.0/i586/mysql-bench-5.0.84-0.2mdv2009.0.i586.rpm
 34cbf21dccbeb564d690ce7c66d2698d  2009.0/i586/mysql-client-5.0.84-0.2mdv2009.0.i586.rpm
 21ee0b85c276823c1fb31d06d41aa70f  2009.0/i586/mysql-common-5.0.84-0.2mdv2009.0.i586.rpm
 2aea7e8563c35718d32323b8916b6e93  2009.0/i586/mysql-doc-5.0.84-0.2mdv2009.0.i586.rpm
 7dc25b1c7389c3714d7bbe36d3abf15b  2009.0/i586/mysql-max-5.0.84-0.2mdv2009.0.i586.rpm
 5927407ea622f6d1414da51e03d74f2a  2009.0/i586/mysql-ndb-extra-5.0.84-0.2mdv2009.0.i586.rpm
 2b8b1c7f01b3ab187ec85d4b2e66606a  2009.0/i586/mysql-ndb-management-5.0.84-0.2mdv2009.0.i586.rpm
 32e6d1ab9f1c46d87caad9d103f398ff  2009.0/i586/mysql-ndb-storage-5.0.84-0.2mdv2009.0.i586.rpm
 8c1ca3484eb9c11daef1ff9c2668f7c0  2009.0/i586/mysql-ndb-tools-5.0.84-0.2mdv2009.0.i586.rpm 
 d2c6899e2d639e0a46d8468bc84454ac  2009.0/SRPMS/mysql-5.0.84-0.2mdv2009.0.src.rpm

CS4.0 i586

 1b9557c9b34f969025cf5663c6acd640  corporate/4.0/i586/libmysql15-5.0.45-7.4.20060mlcs4.i586.rpm
 4c9a7d5e769aecf8206d5cc357517508  corporate/4.0/i586/libmysql-devel-5.0.45-7.4.20060mlcs4.i586.rpm
 2298bdc856aea199adb18d7fd0e199a8  corporate/4.0/i586/libmysql-static-devel-5.0.45-7.4.20060mlcs4.i586.rpm
 11694d6eacad6031184d39f09c1a743b  corporate/4.0/i586/mysql-5.0.45-7.4.20060mlcs4.i586.rpm
 26d5f2972f74bebd927365c6b8aea29f  corporate/4.0/i586/mysql-bench-5.0.45-7.4.20060mlcs4.i586.rpm
 15bbcbec5d99ab7b2c579e1bd70e890a  corporate/4.0/i586/mysql-client-5.0.45-7.4.20060mlcs4.i586.rpm
 05bbf10154ab61f70b7d1bef96e433d5  corporate/4.0/i586/mysql-common-5.0.45-7.4.20060mlcs4.i586.rpm
 79815e2645924f5540fff00163e0d6ac  corporate/4.0/i586/mysql-max-5.0.45-7.4.20060mlcs4.i586.rpm
 8ce00c54f3d5a5ae7520a14ba4a6d31d  corporate/4.0/i586/mysql-ndb-extra-5.0.45-7.4.20060mlcs4.i586.rpm
 a13afdcc0e7529eb7049d10ad6753fc7  corporate/4.0/i586/mysql-ndb-management-5.0.45-7.4.20060mlcs4.i586.rpm
 cff43be291e117fd094c6de3ee717072  corporate/4.0/i586/mysql-ndb-storage-5.0.45-7.4.20060mlcs4.i586.rpm
 7d9b9210ebfd965704439c7a6a82ac0b  corporate/4.0/i586/mysql-ndb-tools-5.0.45-7.4.20060mlcs4.i586.rpm 
 1ca36aca6b2c65a6aea62dca2495139a  corporate/4.0/SRPMS/mysql-5.0.45-7.4.20060mlcs4.src.rpm

CS4.0 x86_64

 dbf87e065578c19b64d466df96a58aac  corporate/4.0/x86_64/lib64mysql15-5.0.45-7.4.20060mlcs4.x86_64.rpm
 efbdc741f009ee171677c6ee751cc074  corporate/4.0/x86_64/lib64mysql-devel-5.0.45-7.4.20060mlcs4.x86_64.rpm
 a56e2f968ecf9cefa2e569b722ebf438  corporate/4.0/x86_64/lib64mysql-static-devel-5.0.45-7.4.20060mlcs4.x86_64.rpm
 263540907d7352253e74c8d9e7867830  corporate/4.0/x86_64/mysql-5.0.45-7.4.20060mlcs4.x86_64.rpm
 f18d3a07e6bea0469fc9f403b9863e1d  corporate/4.0/x86_64/mysql-bench-5.0.45-7.4.20060mlcs4.x86_64.rpm
 30b41d78a46daf5109c2f30e38edc2fe  corporate/4.0/x86_64/mysql-client-5.0.45-7.4.20060mlcs4.x86_64.rpm
 fe1c6a7df34ae07f58ceb2b4f5ab8e1d  corporate/4.0/x86_64/mysql-common-5.0.45-7.4.20060mlcs4.x86_64.rpm
 ce5658bb011633365c74f359d5c5aa83  corporate/4.0/x86_64/mysql-max-5.0.45-7.4.20060mlcs4.x86_64.rpm
 037669a1be7b9a411adb6e87db77e31f  corporate/4.0/x86_64/mysql-ndb-extra-5.0.45-7.4.20060mlcs4.x86_64.rpm
 7c6c390912be084c419d4a73b79f7099  corporate/4.0/x86_64/mysql-ndb-management-5.0.45-7.4.20060mlcs4.x86_64.rpm
 02c2dbaf8f0346142d3865824aa7567c  corporate/4.0/x86_64/mysql-ndb-storage-5.0.45-7.4.20060mlcs4.x86_64.rpm
 6d89669e649f898e1f35d2aa74e713f4  corporate/4.0/x86_64/mysql-ndb-tools-5.0.45-7.4.20060mlcs4.x86_64.rpm 
 1ca36aca6b2c65a6aea62dca2495139a  corporate/4.0/SRPMS/mysql-5.0.45-7.4.20060mlcs4.src.rpm

2008.1 x86_64

 9f1ea47fd375a6755064c258785c73f0  2008.1/x86_64/lib64mysql15-5.0.51a-8.3mdv2008.1.x86_64.rpm
 d7444208199082e58a85b46b7e5bbbc4  2008.1/x86_64/lib64mysql-devel-5.0.51a-8.3mdv2008.1.x86_64.rpm
 369e6f95263472abd215281d1966d92f  2008.1/x86_64/lib64mysql-static-devel-5.0.51a-8.3mdv2008.1.x86_64.rpm
 9909dc719a779a2c66436ee41833547f  2008.1/x86_64/mysql-5.0.51a-8.3mdv2008.1.x86_64.rpm
 3860325b02a80e9a63be97c4fd9108c8  2008.1/x86_64/mysql-bench-5.0.51a-8.3mdv2008.1.x86_64.rpm
 d9b3b6929bd24b1d6e875feed8c1a957  2008.1/x86_64/mysql-client-5.0.51a-8.3mdv2008.1.x86_64.rpm
 9979f82c4d640a2dd7d74f600c428004  2008.1/x86_64/mysql-common-5.0.51a-8.3mdv2008.1.x86_64.rpm
 4af8c7ceff4bc8f4ed65826d2f2da519  2008.1/x86_64/mysql-doc-5.0.51a-8.3mdv2008.1.x86_64.rpm
 b56aee4f26e9ec7136994047348c0c34  2008.1/x86_64/mysql-max-5.0.51a-8.3mdv2008.1.x86_64.rpm
 be02d59a3060287436bbc95c97adca80  2008.1/x86_64/mysql-ndb-extra-5.0.51a-8.3mdv2008.1.x86_64.rpm
 5bf5715866f49b050972d937f1c8757c  2008.1/x86_64/mysql-ndb-management-5.0.51a-8.3mdv2008.1.x86_64.rpm
 a136e3d9956101149e56dde69578c37b  2008.1/x86_64/mysql-ndb-storage-5.0.51a-8.3mdv2008.1.x86_64.rpm
 2149c675079fea5e03590d3d7491fab9  2008.1/x86_64/mysql-ndb-tools-5.0.51a-8.3mdv2008.1.x86_64.rpm 
 79bdf79636fcd2a542195f4356b10611  2008.1/SRPMS/mysql-5.0.51a-8.3mdv2008.1.src.rpm

2008.1 i586

 3628f8975e928e87a1a364cf8817a200  2008.1/i586/libmysql15-5.0.51a-8.3mdv2008.1.i586.rpm
 317c6543ab44b98981a426a61da15726  2008.1/i586/libmysql-devel-5.0.51a-8.3mdv2008.1.i586.rpm
 2c38fa4add8cb3b2ee751dc552309e99  2008.1/i586/libmysql-static-devel-5.0.51a-8.3mdv2008.1.i586.rpm
 c8e3a790a4062d9af0da3f2561478e85  2008.1/i586/mysql-5.0.51a-8.3mdv2008.1.i586.rpm
 65daf3337e7089633a9e9f6b00a9cdf7  2008.1/i586/mysql-bench-5.0.51a-8.3mdv2008.1.i586.rpm
 941ae80135f17328d5cd56b9acf193c9  2008.1/i586/mysql-client-5.0.51a-8.3mdv2008.1.i586.rpm
 ae37b0e87a93a5b84c6b591c9d5d42d5  2008.1/i586/mysql-common-5.0.51a-8.3mdv2008.1.i586.rpm
 9c5028a0999ae2ac20d911660d88cf1e  2008.1/i586/mysql-doc-5.0.51a-8.3mdv2008.1.i586.rpm
 2a5b92da25ed9f19ec26d61eeb479990  2008.1/i586/mysql-max-5.0.51a-8.3mdv2008.1.i586.rpm
 801f996c1a66cb3b93bf7d62761cb492  2008.1/i586/mysql-ndb-extra-5.0.51a-8.3mdv2008.1.i586.rpm
 0083b276c3045f240de7d75aedaca226  2008.1/i586/mysql-ndb-management-5.0.51a-8.3mdv2008.1.i586.rpm
 1b83044a362c90b6c7a2a78ce495d9ec  2008.1/i586/mysql-ndb-storage-5.0.51a-8.3mdv2008.1.i586.rpm
 4aa47c32b6e7863e1f52eb428bab87ff  2008.1/i586/mysql-ndb-tools-5.0.51a-8.3mdv2008.1.i586.rpm 
 79bdf79636fcd2a542195f4356b10611  2008.1/SRPMS/mysql-5.0.51a-8.3mdv2008.1.src.rpm

References