[Sarlug] [Fwd: [security-announce] IA: new MySQL packages available]

[Genix <genix@list.ru>]

[-- Attachment #1: Type: text/plain, Size: 39 bytes --]


-- 
Я летаю снаружи всех измерений...

[-- Attachment #2: [security-announce] IA: new MySQL packages available --]
[-- Type: message/rfc822, Size: 7344 bytes --]

[-- Attachment #2.1.1: Type: text/plain, Size: 164 bytes --]

_______________________________________________
Security-announce mailing list
Security-announce@altlinux.ru
http://altlinux.ru/mailman/listinfo/security-announce


[-- Attachment #2.1.2: Type: message/rfc822, Size: 4863 bytes --]

[-- Attachment #2.1.2.1.1: Type: text/plain, Size: 1 bytes --]



[-- Attachment #2.1.2.1.2: ATT235644.txt --]
[-- Type: text/plain, Size: 3272 bytes --]

Frank Denis ÏÂÎÁÒÕÖÉÌ ÕÑÚ×ÉÍÏÓÔØ × ÓÅÒ×ÅÒÅ ÂÁÚ ÄÁÎÎÙÈ MySQL.

æÕÎËÃÉÑ ÐÒÏ×ÅÒËÉ ÐÁÒÏÌÑ ÄÌÑ ÓÉÓÔÅÍÎÏÊ ÔÁÂÌÉÃÙ mysql:user ÓÏÄÅÒÖÉÔ ÏÛÉÂËÕ
ÐÅÒÅÐÏÌÎÅÎÉÑ ÂÕÆÅÒÁ.  éÓÐÏÌØÚÕÑ × ËÁÞÅÓÔ×Å ÐÁÒÏÌÑ ÓÐÅÃÉÁÌØÎÕÀ ÓÔÒÏËÕ
ÄÌÉÎÏÊ ÂÏÌÅÅ 16 ÓÉÍ×ÏÌÏ×, ÁÄÍÉÎÉÓÔÒÁÔÏÒ ÂÁÚÙ ÄÁÎÎÙÈ ÍÏÖÅÔ ÚÁ×ÌÁÄÅÔØ
ÓÅÒ×ÅÒÎÙÍ ÐÒÏÃÅÓÓÏÍ mysqld É ×ÙÐÏÌÎÑÔØ ÐÒÏÉÚ×ÏÌØÎÙÊ ËÏÄ Ó ÐÒÁ×ÁÍÉ ÜÔÏÇÏ
ÐÒÏÃÅÓÓÁ.

ó ÐÏÄÒÏÂÎÏÊ ÉÎÆÏÒÍÁÃÉÅÊ Ï ÕÑÚ×ÉÍÏÓÔÉ ÍÏÖÎÏ ÏÚÎÁËÏÍÉÔØÓÑ ÐÏ ÁÄÒÅÓÕ:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0780

÷Ï ×ÓÅÈ ÄÉÓÔÒÉÂÕÔÉ×ÁÈ, ×ÙÐÕÝÅÎÎÙÈ ALT Linux, ÓÅÒ×ÅÒÎÙÊ ÐÒÏÃÅÓÓ mysqld
×ÙÐÏÌÎÑÅÔÓÑ Ó ÐÒÁ×ÁÍÉ ÐÓÅ×ÄÏÐÏÌØÚÏ×ÁÔÅÌÑ × ÓÐÅÃÉÁÌØÎÏÊ ÉÚÏÌÉÒÏ×ÁÎÎÏÊ
ÓÒÅÄÅ (chrooted environment), ÂÌÁÇÏÄÁÒÑ ÞÅÍÕ ×ÏÚÍÏÖÎÙÅ ÐÏÓÌÅÄÓÔ×ÉÑ ÁÔÁËÉ
Ó×ÅÄÅÎÙ ÎÁ ÎÅÔ.

äÁÎÎÁÑ ÕÑÚ×ÉÍÏÓÔØ ÉÓÐÒÁ×ÌÅÎÁ × MySQL ×ÅÒÓÉÑÈ 3.23.58 É 4.0.15.

÷ ×ÅÒÓÉÑÈ 3.23.49 - 3.23.58 ÉÓÐÒÁ×ÌÅÎÙ ÔÁËÖÅ ÄÒÕÇÉÅ ÏÛÉÂËÉ, ÎÅËÏÔÏÒÙÅ
ÉÚ ËÏÔÏÒÙÈ ÍÏÇÕÔ ÐÒÉ×ÅÓÔÉ Ë ÐÁÄÅÎÉÀ ÓÅÒ×ÅÒÁ É ÏÔËÁÚÕ × ÏÂÓÌÕÖÉ×ÁÎÉÉ.
ðÏÌÎÙÊ ÓÐÉÓÏË ÉÓÐÒÁ×ÌÅÎÉÊ ÐÒÉ×ÅģΠÐÏ ÁÄÒÅÓÕ:
http://www.mysql.com/doc/en/News-3.23.x.html

íÙ ÒÅËÏÍÅÎÄÕÅÍ ×ÓÅÍ ÐÏÌØÚÏ×ÁÔÅÌÑÍÉ ÓÅÒ×ÅÒÁ MySQL ÏÂÎÏ×ÉÔØ ÐÁËÅÔÙ
ÄÏ ×ÅÒÓÉÉ 3.23.58, × ËÏÔÏÒÙÈ ÏÐÉÓÁÎÎÙÅ ×ÙÛÅ ÏÛÉÂËÉ ÉÓÐÒÁ×ÌÅÎÙ.
ðÏÌØÚÏ×ÁÔÅÌÑÍ ÒÅÐÏÚÉÔÁÒÉÑ ALT Linux Sisyphus ÒÅËÏÍÅÎÄÕÅÔÓÑ ÏÂÎÏ×ÌÅÎÉÅ
ÄÏ ÔÅËÕÝÅÊ ×ÅÒÓÉÉ (4.0.15).

ïÂÎÏ×ÌÅÎÉÑ ÄÏÓÔÕÐÎÙ ÐÏ ÓÌÅÄÕÀÝÉÍ ÁÄÒÅÓÁÍ:

+ äÌÑ ÄÉÓÔÒÉÂÕÔÉ×Ï× ALT Linux Master 2.0 É ALT Linux "õÔ£Ó-ë":
ftp://updates.altlinux.com/Master/2.0/SRPMS/MySQL-3.23.58-alt1.M20.src.rpm
ftp://updates.altlinux.com/Master/2.0/i586/RPMS/libMySQL-3.23.58-alt1.M20.i586.rpm
ftp://updates.altlinux.com/Master/2.0/i586/RPMS/libMySQL-devel-3.23.58-alt1.M20.i586.rpm
ftp://updates.altlinux.com/Master/2.0/i586/RPMS/libMySQL-devel-static-3.23.58-alt1.M20.i586.rpm
ftp://updates.altlinux.com/Master/2.0/i586/RPMS/MySQL-bench-3.23.58-alt1.M20.i586.rpm
ftp://updates.altlinux.com/Master/2.0/i586/RPMS/MySQL-client-3.23.58-alt1.M20.i586.rpm
ftp://updates.altlinux.com/Master/2.0/i586/RPMS/MySQL-doc-3.23.58-alt1.M20.i586.rpm
ftp://updates.altlinux.com/Master/2.0/i586/RPMS/MySQL-server-3.23.58-alt1.M20.i586.rpm

+ äÌÑ ÄÉÓÔÒÉÂÕÔÉ×Á ALT Linux Master 2.2:
ftp://updates.altlinux.com/Master/2.2/SRPMS.updates/MySQL-3.23.58-alt1.M22.src.rpm
ftp://updates.altlinux.com/Master/2.2/i586/RPMS.updates/libMySQL-3.23.58-alt1.M22.i586.rpm
ftp://updates.altlinux.com/Master/2.2/i586/RPMS.updates/libMySQL-devel-3.23.58-alt1.M22.i586.rpm
ftp://updates.altlinux.com/Master/2.2/i586/RPMS.updates/libMySQL-devel-static-3.23.58-alt1.M22.i586.rpm
ftp://updates.altlinux.com/Master/2.2/i586/RPMS.updates/MySQL-bench-3.23.58-alt1.M22.i586.rpm
ftp://updates.altlinux.com/Master/2.2/i586/RPMS.updates/MySQL-client-3.23.58-alt1.M22.i586.rpm
ftp://updates.altlinux.com/Master/2.2/i586/RPMS.updates/MySQL-doc-3.23.58-alt1.M22.i586.rpm
ftp://updates.altlinux.com/Master/2.2/i586/RPMS.updates/MySQL-server-3.23.58-alt1.M22.i586.rpm
ftp://updates.altlinux.com/Master/2.2/i586/RPMS.updates/MySQL-server-perl-3.23.58-alt1.M22.i586.rpm

+ äÌÑ ÐÏÌØÚÏ×ÁÔÅÌÅÊ ÒÅÐÏÚÉÔÏÒÉÑ ALT Linux Sisyphus ÏÂÎÏ×ÌÅÎÉÑ ÄÏÓÔÕÐÎÙ
ÏÂÙÞÎÙÍ ÏÂÒÁÚÏÍ.

ïÂÎÏ×ÌÅÎÉÅ ÍÏÖÎÏ ÐÒÏ×ÏÄÉÔØ Ó ÐÏÍÏÝØÀ apt-get, ËÁË ÐÏ ÁÄÒÅÓÁÍ,
ÐÒÉ×ÅÄ£ÎÎÙÍ ×ÙÛÅ, ÔÁË É ÐÏ ÁÄÒÅÓÁÍ ÚÅÒËÁÌ, ÐÒÉ×ÅÄ£ÎÎÙÍ ÐÏ ÁÄÒÅÓÕ
http://www.altlinux.ru/index.php?module=download


-- 
ALT Security Team