Nom du paquet
MySQL
Date
2003-05-14
Advisory ID
MDKSA-2003:057
Affected versions
8.2 i586 , CS2.1 i586 , 8.2 i586 , 9.0 i586

Problem description

In MySQL 3.23.55 and earlier, MySQL would create world-writeable files and allow mysql users to gain root privileges by using the "SELECT * INTO OUTFILE" operator to overwrite a configuration file, which could cause mysql to run as root upon restarting the daemon. This has been fixed upstream in version 3.23.56, which is provided for Mandrake Linux 9.0 and Corporate Server 2.1 users. The other updated packages have been patched to correct this issue.

Updated packages

8.2 i586

 687e59d3fd1b6537089f5170fcb6b774  ppc/8.2/RPMS/libmysql10-3.23.47-5.4mdk.ppc.rpm
42ecf94aeef17701612f9ca983532f49  ppc/8.2/RPMS/libmysql10-devel-3.23.47-5.4mdk.ppc.rpm
2166b3a117fd64530fe9c4824863c794  ppc/8.2/RPMS/MySQL-3.23.47-5.4mdk.ppc.rpm
a63145890735d6d6fe2f5deb89dcaea3  ppc/8.2/RPMS/MySQL-bench-3.23.47-5.4mdk.ppc.rpm
bef9db8d6b2c601c198108b1691d18ad  ppc/8.2/RPMS/MySQL-client-3.23.47-5.4mdk.ppc.rpm
cb9877acc377e474a747b92b248ad15f  ppc/8.2/SRPMS/MySQL-3.23.47-5.4mdk.src.rpm

CS2.1 i586

 771da57ceb06e83004574943d5b0ac90  corporate/2.1/RPMS/libmysql10-3.23.56-1.3mdk.i586.rpm
9cb6003252c9739437ac718f8ce30bd3  corporate/2.1/RPMS/libmysql10-devel-3.23.56-1.3mdk.i586.rpm
23ca6464b816cef97219b6502f724ba1  corporate/2.1/RPMS/MySQL-3.23.56-1.3mdk.i586.rpm
875361e8f58f0a4115d97218c5d2994b  corporate/2.1/RPMS/MySQL-Max-3.23.56-1.3mdk.i586.rpm
6c232f27da3a9ef54aaedf27adf24194  corporate/2.1/RPMS/MySQL-bench-3.23.56-1.3mdk.i586.rpm
35f369564c22d2ea616be53ed3cfc443  corporate/2.1/RPMS/MySQL-client-3.23.56-1.3mdk.i586.rpm
ec9f60b48602b37ab0d0f169e6f76d7d  corporate/2.1/SRPMS/MySQL-3.23.56-1.3mdk.src.rpm

8.2 i586

 f5e6fe580b843dc2b9b88dc718a7e023  8.2/RPMS/libmysql10-3.23.47-5.4mdk.i586.rpm
de9d9746e1d11e9ac0f33d8dccc9efb5  8.2/RPMS/libmysql10-devel-3.23.47-5.4mdk.i586.rpm
8b6a93228a219c0c8c1ee3bf10f8db75  8.2/RPMS/MySQL-3.23.47-5.4mdk.i586.rpm
78661bad82cdfd289b15b5a04ad5a7dc  8.2/RPMS/MySQL-bench-3.23.47-5.4mdk.i586.rpm
e0dff82e38a007e76dd47e3f36af6cf8  8.2/RPMS/MySQL-client-3.23.47-5.4mdk.i586.rpm
cb9877acc377e474a747b92b248ad15f  8.2/SRPMS/MySQL-3.23.47-5.4mdk.src.rpm

9.0 i586

 771da57ceb06e83004574943d5b0ac90  9.0/RPMS/libmysql10-3.23.56-1.3mdk.i586.rpm
9cb6003252c9739437ac718f8ce30bd3  9.0/RPMS/libmysql10-devel-3.23.56-1.3mdk.i586.rpm
23ca6464b816cef97219b6502f724ba1  9.0/RPMS/MySQL-3.23.56-1.3mdk.i586.rpm
875361e8f58f0a4115d97218c5d2994b  9.0/RPMS/MySQL-Max-3.23.56-1.3mdk.i586.rpm
6c232f27da3a9ef54aaedf27adf24194  9.0/RPMS/MySQL-bench-3.23.56-1.3mdk.i586.rpm
35f369564c22d2ea616be53ed3cfc443  9.0/RPMS/MySQL-client-3.23.56-1.3mdk.i586.rpm
ec9f60b48602b37ab0d0f169e6f76d7d  9.0/SRPMS/MySQL-3.23.56-1.3mdk.src.rpm

References