-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 29 Dec 2010 18:11:12 +0100 Source: mysql-dfsg-5.0 Binary: libmysqlclient15off libmysqlclient15-dev mysql-common mysql-client-5.0 mysql-server-5.0 mysql-server mysql-client Architecture: i386 Version: 5.0.51a-24+lenny5 Distribution: stable-security Urgency: high Maintainer: i386 Build Daemon Changed-By: Giuseppe Iuculano Description: libmysqlclient15-dev - MySQL database development files libmysqlclient15off - MySQL database client library mysql-client - MySQL database client (metapackage depending on the latest versio mysql-client-5.0 - MySQL database client binaries mysql-common - MySQL database common files mysql-server - MySQL database server (metapackage depending on the latest versio mysql-server-5.0 - MySQL database server binaries Changes: mysql-dfsg-5.0 (5.0.51a-24+lenny5) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fixed CVE-2010-3677: Incorrect handling of NULL arguments could lead to a crash. * Fixed CVE-2010-3680: The server could crash if there were alternate reads from two indexes on a table using the HANDLER interface. * Fixed CVE-2010-3681: NULL pointer dereference leading to (temporary) server DoS. * Fixed CVE-2010-3682: Assertion failure leading to server abort. * Fixed CVE-2010-3833: crash when KILL_BAD_DATA is returned * Fixed CVE-2010-3834: user variable assignments crash server when used within query * Fixed CVE-2010-3835: crash with user variables, assignments, joins. * Fixed CVE-2010-3836: create view cause Assertion failed (crash) * Fixed CVE-2010-3837: crash when group_concat and 'with rollup' in prepared statements * Fixed CVE-2010-3838: crash with longblob and union or update with subquery * Fixed CVE-2010-3840: crash when loading data into geometry function polyfromwkb Checksums-Sha1: 7fb416fc15f1d7b31055643c7d77b84b07262c8a 1860122 libmysqlclient15off_5.0.51a-24+lenny5_i386.deb 2cee108a9f016f266c11329797525d3a9ef117cc 7198084 libmysqlclient15-dev_5.0.51a-24+lenny5_i386.deb e6c07ccf8a191a0a6df75a2e9152351b0ce843f0 7781808 mysql-client-5.0_5.0.51a-24+lenny5_i386.deb d9e2d7c05e9a2b6754ab02e48cfe39b8b61058fd 26666148 mysql-server-5.0_5.0.51a-24+lenny5_i386.deb Checksums-Sha256: 571837f535a831689da3b349721c729c91eddf3affe584398acebf65e0bf61e5 1860122 libmysqlclient15off_5.0.51a-24+lenny5_i386.deb e8a481a13a17a70cbf67c45293e37bf1f6f7139d75475dad121852fe978be1e3 7198084 libmysqlclient15-dev_5.0.51a-24+lenny5_i386.deb 9fd472255d4e2abe82e14b171f6e6a0a48125c3db96d5f23dd9b0828d18d21cd 7781808 mysql-client-5.0_5.0.51a-24+lenny5_i386.deb c5a0ff575d6c05583c44b607db2047f6612f9a7c7f56a010ccf2822eee6edf49 26666148 mysql-server-5.0_5.0.51a-24+lenny5_i386.deb Files: 07c50abe53624949f1cb33cff1e576fc 1860122 libs optional libmysqlclient15off_5.0.51a-24+lenny5_i386.deb 8ce06e8f0af35bcff816b885d2752992 7198084 libdevel optional libmysqlclient15-dev_5.0.51a-24+lenny5_i386.deb 0a425338882f237647444ce594eb0ca3 7781808 misc optional mysql-client-5.0_5.0.51a-24+lenny5_i386.deb 012b5b097509e8ee03f9038a303d2cd0 26666148 misc optional mysql-server-5.0_5.0.51a-24+lenny5_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAk0fR+QACgkQNxpp46476apbjgCgkV6ibeq3p8PtUCLLq2yo3T6r G8sAn04r9hU4zYV0dflziPnC99Ss9UJ8 =D0b5 -----END PGP SIGNATURE-----