Re: [devel] [cyber] I: Sisyphus-20080317 packages: +3! +13 (7641)

["Konstantin A. Lepikhov" <lakostis@altlinux.org>]

[-- Attachment #1: Type: text/plain, Size: 1085 bytes --]

Hi Vladimir!

Monday 17, at 03:37:22 PM you wrote:

> >>>>> On 17 Mar 2008 at 02:21 "QTR" == QA Team Robot writes:
> 
> QTR> 	13 UPDATED packages
> 
> QTR> MySQL - MySQL: A very fast and reliable SQL database engine     	[32M]
> QTR> * Sun Mar 16 2008 L.A. Kostis <lakostis@altlinux> 5.0.51-alt2.a
> QTR> - 5.0.51a.
> QTR> - Security fixes:
> QTR>   + CVE-2008-0226, CVE-2008-0227 (Three vulnerabilities in yaSSL versions 1.7.5
> QTR>     that could lead to a server crash or execution of unauthorized code.)
> QTR>   + ALTER VIEW retained the original DEFINER value, even when altered by
> QTR>     another user, which could allow that user to gain the access rights of the
> QTR>     view (MySQL #29908).
> QTR> - Add glibc-locales to -server deps (ALT #13909 #14731).
> QTR> - Make links to mysqld_safe for backwards compatibility (ALT #14863).
> QTR> - Update html documentation to 10265 revsion.
> QTR> * Tue Jan 01 2008 L.A. Kostis <lakostis@altlinux> 5.0.51-alt1
> 
> Будут ли исправлены в 4.0 бранче вышеозначенные уязвимости?
Будут.

-- 
WBR et al.

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]