Summary
The remote host is missing an update to mysql
announced via advisory FEDORA-2009-13466.
Solution
Apply the appropriate updates.
This update can be installed with the yum update program. Use su -c 'yum update mysql' at the command line.
For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/.
https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-13466
Insight
MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.
Update Information:
- Update to MySQL 5.1.41, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html including security fixes
- Stop waiting during service mysqld start if mysqld_safe exits
ChangeLog:
* Thu Dec 17 2009 Tom Lane 5.1.41-2
- Update to MySQL 5.1.41, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html including fixes for CVE-2009-4019
Related: #540906
- Stop waiting during service mysqld start if mysqld_safe exits Resolves: #544095
* Tue Nov 10 2009 Tom Lane 5.1.40-1
- Update to MySQL 5.1.40, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html - Do not force the --log-error setting in mysqld init script Resolves: #533736
References
Severity
Classification
-
CVE CVE-2009-4019, CVE-2009-4028 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities