Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

openSUSE: 2012:0860-1 Critical: MySQL Credential Exploit

opensuse
Calendar Grey July 11, 2012
Dist Opensuse Esm H88
The latest openSUSE security update tackles a critical MySQL authentication bypass vulnerability, urging users to upgrade their instances to ensure database security and integrity
An update that fixes one vulnerability is now available

Description

Fixing CVE-2012-2122: authentication bypass due to

incorrect type casting

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 12.1:

zypper in -t patch openSUSE-2012-378

- openSUSE 11.4:

zypper in -t patch openSUSE-2012-378

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 12.1 (i586 x86_64):

libmysqlclusterclient16-7.1.22-2.7.1

libmysqlclusterclient16-debuginfo-7.1.22-2.7.1

libmysqlclusterclient_r16-7.1.22-2.7.1

libmysqlclusterclient_r16-debuginfo-7.1.22-2.7.1

mysql-cluster-7.1.22-2.7.1

mysql-cluster-bench-7.1.22-2.7.1

mysql-cluster-bench-debuginfo-7.1.22-2.7.1

mysql-cluster-client-7.1.22-2.7.1

mysql-cluster-client-debuginfo-7.1.22-2.7.1

mysql-cluster-debug-7.1.22-2.7.1

mysql-cluster-debug-debuginfo-7.1.22-2.7.1

mysql-cluster-debuginfo-7.1.22-2.7.1

mysql-cluster-debugsource-7.1.22-2.7.1

mysql-cluster-ndb-extra-7.1.22-2.7.1

mysql-cluster-ndb-extra-debuginfo-7.1.22-2.7.1

mysql-cluster-ndb-management-7.1.22-2.7.1

mysql-cluster-ndb-management-debuginfo-7.1.22-2.7.1

mysql-cluster-ndb-storage-7.1.22-2.7.1

mysql-cluster-ndb-storage-debuginfo-7.1.22-2.7.1

mysql-cluster-ndb-tools-7.1.22-2.7.1

mysql-cluster-ndb-tools-debuginfo-7.1.22-2.7.1

mysql-cluster-test-7.1.22-2.7.1

mysql-cluster-test-debuginfo-7.1.22-2.7.1

mysql-cluster-tools-7.1.22-2.7.1

mysql-cluster-tools-debuginfo-7....

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2012-2122.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2012:0860-1
Rating: important
Affected Products: openSUSE 12.1 openSUSE 11.4 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here