Date: Thu, 27 Sep 2012 11:11:29 +0530 From: Huzaifa Sidhpurwala <huzaifas@...hat.com> To: oss-security@...ts.openwall.com Subject: CVE-2009-4030 regression in mysql Hi All, It was found that the fix for CVE-2009-4030 was not present in mysql version 5.0.88, as claimed by upstream. As a result of this, Red Hat Security Advisory RHSA-2012:0127 which rebased mysql in Red Hat Enterprise Linux 5 to 5.0.95, missed the above fix. We have assigned CVE-2012-4452 to this issue. Reference: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4452 http://bugs.mysql.com/bug.php?id=32167 http://rhn.redhat.com/errata/RHSA-2012-0127.html -- Huzaifa Sidhpurwala / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.