[Pkg-mysql-commits] r1238 - trunk/debian

[Norbert Tretkowski]

tags 480292 pending
thanks

Author: nobse
Date: 2008-05-26 19:07:22 +0000 (Mon, 26 May 2008)
New Revision: 1238

Modified:
   trunk/debian/changelog
Log:
New upstream release.

Modified: trunk/debian/changelog
===================================================================
--- trunk/debian/changelog	2008-05-21 19:07:50 UTC (rev 1237)
+++ trunk/debian/changelog	2008-05-26 19:07:22 UTC (rev 1238)
@@ -1,6 +1,13 @@
-mysql-dfsg-5.0 (5.0.51a-7) UNRELEASED; urgency=low
+mysql-dfsg-5.0 (5.0.60-1) UNRELEASED; urgency=low
 
   [ Norbert Tretkowski ]
+  * New upstream release.
+  * SECURITY:
+    Fix for CVE-2008-2079: It was possible to circumvent privileges through
+    the creation of MyISAM tables employing the DATA DIRECTORY and INDEX
+    DIRECTORY options to overwrite existing table files in the MySQL data
+    directory. Use of the MySQL data directory in DATA DIRECTORY and INDEX
+    DIRECTORY is now disallowed. (closes: #480292)
   * Fix build on non-linux systems like hurd-i386. (closes: #480362)
   * Include symlinks for mysqlcheck. (closes: #480647)
 
@@ -14,7 +21,7 @@
     (closes: #480940)
   * Removed a spurious HOME= in logrotate script.  
 
- -- Monty Taylor <mordred at inaugust.com>  Fri, 16 May 2008 11:13:27 -0700
+ -- Norbert Tretkowski <nobse at debian.org>  Mon, 26 May 2008 21:02:58 +0200
 
 mysql-dfsg-5.0 (5.0.51a-6) unstable; urgency=low