Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Slackware 10.2 Moderate: MySQL 4.1.20 Information Leak Resolved

slackware
Calendar Grey June 5, 2006
Dist Slackware Esm H88
Latest MySQL updates made available for Slackware to address vulnerabilities and enhance security measures. Upgrade is advised.
New mysql packages are available for Slackware 9.1, 10.0, 10.1, 10.2 and -current to fix security issues

Summary

Here are the details from the Slackware 10.1 ChangeLog: patches/packages/mysql-4.0.27-i486-1_slack10.1.tgz: Upgraded to mysql-4.0.27. This fixes some minor security issues with possible information leakage. Note that the information leakage bugs require that the attacker have access to an account on the database. Also note that by default, Slackware's rc.mysqld script does *not* allow access to the database through the outside network (it uses the --skip-networking option). If you've enabled network access to MySQL, it is a good idea to filter the port (3306) to prevent access from unauthorized machines. For more details, see the MySQL 4.0.27 release announcement here: https://forums.mysql.com/ For more information, see: https://www.cve.org/CVERecord?id=CVE-2006-1516 https://www.cve.org/CVERecord?id=CVE-2006-1517 (* Security fix *) Here are the details from the Slackware 10.2 ChangeLog: patches/packages/mysql-4.1.20-i486-1_slack10.2.tgz:

Read the Full Advisory

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 9.1: ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/mysql-4.0.27-i486-1_slack9.1.tgz
Updated package for Slackware 10.0: ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/mysql-4.0.27-i486-1_slack10.0.tgz
Updated package for Slackware 10.1: ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/mysql-4.0.27-i486-1_slack10.1.tgz
Updated package for Slackware 10.2:
Updated package for Slackware -current:

MD5 Signatures

Slackware 9.1 package: eea73f16715c07de52701b67f037e7ab mysql-4.0.27-i486-1_slack9.1.tgz
Slackware 10.0 package: 6afab2cdd09adf4b4f822db6c74b167e mysql-4.0.27-i486-1_slack10.0.tgz
Slackware 10.1 package: cbe2044d3b75606de6f3796d607e7c0a mysql-4.0.27-i486-1_slack10.1.tgz
Slackware 10.2 package: 249bc3f4610cbedf8b0a6fc64c28c53f mysql-4.1.20-i486-1_slack10.2.tgz
Slackware -current package: af1829c54b901bc01fcd269f27580b21 mysql-5.0.22-i486-1.tgz

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg mysql-4.1.20-i486-1_slack10.2.tgz Then, restart the database server: # sh /etc/rc.d/rc.mysqld restart

Related News

Your message here