Uočen je i ispravljen sigurnosni propust kod programskog paketa mysql. Zlonamjerni napadači mogu navedeni nedostatak iskoristiti za zaobilaženje postavljenih ograničenja.

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-9308
2012-06-13 20:57:30
--------------------------------------------------------------------------------

Name        : mysql
Product     : Fedora 17
Version     : 5.5.24
Release     : 1.fc17
URL         : http://www.mysql.com
Summary     : MySQL client programs and shared libraries
Description :
MySQL is a multi-user, multi-threaded SQL database server. MySQL is a
client/server implementation consisting of a server daemon (mysqld)
and many different client programs and libraries. The base package
contains the standard MySQL client programs and generic MySQL files.

--------------------------------------------------------------------------------
Update Information:

Update to MySQL 5.5.24, for various fixes described at
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-24.html
including the fix for CVE-2012-2122
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jun 11 2012 Tom Lane <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 5.5.24-1
- Update to MySQL 5.5.24, for various fixes described at
  http://dev.mysql.com/doc/refman/5.5/en/news-5-5-24.html
  including the fix for CVE-2012-2122
Resolves: #830680
- Tweak logrotate script to put the right permissions on mysqld.log
- Minor specfile fixes for recent packaging guidelines changes
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #814605 - CVE-2012-2122 mysql: incorrect type cast in
check_scramble() leading to authentication bypass
        https://bugzilla.redhat.com/show_bug.cgi?id=814605
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update mysql' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce