Groups > linux.debian.security > #5002 > unrolled thread

Re: [SECURITY] [DSA 3666-1] mysql-5.5 security update

Started by	Marc K <d44869@gmail.com>
First post	2016-09-14 18:20 +0200
Last post	2016-09-14 18:20 +0200
Articles	1 — 1 participant

Back to article view | Back to linux.debian.security

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

  Re: [SECURITY] [DSA 3666-1] mysql-5.5 security update Marc K <d44869@gmail.com> - 2016-09-14 18:20 +0200

#5002 — Re: [SECURITY] [DSA 3666-1] mysql-5.5 security update

From	Marc K <d44869@gmail.com>
Date	2016-09-14 18:20 +0200
Subject	Re: [SECURITY] [DSA 3666-1] mysql-5.5 security update
Message-ID	<shl4J-36P-7@gated-at.bofh.it>

[Multipart message — attachments visible in raw view] — view raw

robert.sturm@datagroup.de

On Wed, Sep 14, 2016, 17:14 Salvatore Bonaccorso <carnil@debian.org> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> - -------------------------------------------------------------------------
> Debian Security Advisory DSA-3666-1                   security@debian.org
> https://www.debian.org/security/                     Salvatore Bonaccorso
> September 14, 2016                    https://www.debian.org/security/faq
> - -------------------------------------------------------------------------
>
> Package        : mysql-5.5
> CVE ID         : CVE-2016-6662
>
> Dawid Golunski discovered that the mysqld_safe wrapper provided by the
> MySQL database server insufficiently restricted the load path for custom
> malloc implementations, which could result in privilege escalation.
>
> The vulnerability was addressed by upgrading MySQL to the new upstream
> version 5.5.52, which includes additional changes, such as performance
> improvements, bug fixes, new features, and possibly incompatible
> changes. Please see the MySQL 5.5 Release Notes for further details:
>
>  https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-51.html
>  https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html
>
> For the stable distribution (jessie), this problem has been fixed in
> version 5.5.52-0+deb8u1.
>
> We recommend that you upgrade your mysql-5.5 packages.
>
> Further information about Debian Security Advisories, how to apply
> these updates to your system and frequently asked questions can be
> found at: https://www.debian.org/security/
>
> Mailing list: debian-security-announce@lists.debian.org
> -----BEGIN PGP SIGNATURE-----
>
> iQIcBAEBCgAGBQJX2WdfAAoJEAVMuPMTQ89EHJ0P/2GguTleQy7sFNqsBZHsANTz
> MYYazcwSHQQbMiAVKGkzO5sT+UmUcgA3YavP3ZUrB1PEg+03d6sgvpEV1vq5bSmX
> 7Br+6qgj4Sz1LCPBf/iS/RJ4WpSRkVFNNWqyvZOyj0HvvDpASscO6XRvmJdVcSGn
> 6kl9qv4HxHY0LXAi4hxkD/h4aMjRwt7kG3PK32QAPqhn2bXXT3pdRZF1We8wFjS2
> Tkxky3f8Ns4Ect2dbgNXYrlpcGODD9lYzESH8e4Cdrvsyyr/J39M8XH/va8uJfgS
> Db8VA2/hiy22jTMI0r2kqhgFcv5L6HK/FO9So5ON6zSAtLj4risMoXbclpMLe4qd
> saF+XQVAgaSvPZ6K0KuPJihmKj3XshzBDYO9aKsD1yiUfpu+IfRPUqyO1g7si4kD
> FbcIN2KnRnNROFsronsOWnyCQ8ffrKJokzRkzcpjU4qkFLK3rvpLkUvwm2+KTlCC
> W6ZtW9tpADr8hK7fcGKBPqj4aQTV2101Vuy08LSLqMMXq+kJF3VzsRlWctqodEpX
> /eSnwSeBvcigSZXWTcrwMt1vb+ixVSYkybFokvjjK5WEdH6LuO4YaBv6VuJewH2E
> FWxKBTHos5Uff2DNQz63B0As7ul6VjoWCcQhaY2e84WzIaVdJAcog5Rzf3IIBc+M
> ftF3slzWy/NPPG2SZURD
> =ihba
> -----END PGP SIGNATURE-----
>
>

[toc] | [standalone]

csiph-web

Re: [SECURITY] [DSA 3666-1] mysql-5.5 security update

Contents

#5002 — Re: [SECURITY] [DSA 3666-1] mysql-5.5 security update