RHSA-2010:0109: Moderate: mysql security update

First published: Tue Feb 16 2010(Updated: )

MySQL is a multi-user, multi-threaded SQL database server. It consists of<br>the MySQL server daemon (mysqld) and many client programs and libraries.<br>It was discovered that the MySQL client ignored certain SSL certificate<br>verification errors when connecting to servers. A man-in-the-middle<br>attacker could use this flaw to trick MySQL clients into connecting to a<br>spoofed MySQL server. (CVE-2009-4028)<br>Note: This fix may uncover previously hidden SSL configuration issues, such<br>as incorrect CA certificates being used by clients or expired server<br>certificates. This update should be carefully tested in deployments where<br>SSL connections are used.<br>A flaw was found in the way MySQL handled SELECT statements with subqueries<br>in the WHERE clause, that assigned results to a user variable. A remote,<br>authenticated attacker could use this flaw to crash the MySQL server daemon<br>(mysqld). This issue only caused a temporary denial of service, as the<br>MySQL daemon was automatically restarted after the crash. (CVE-2009-4019)<br>When the "datadir" option was configured with a relative path, MySQL did<br>not properly check paths used as arguments for the DATA DIRECTORY and INDEX<br>DIRECTORY directives. An authenticated attacker could use this flaw to<br>bypass the restriction preventing the use of subdirectories of the MySQL<br>data directory being used as DATA DIRECTORY and INDEX DIRECTORY paths.<br>(CVE-2009-4030)<br>Note: Due to the security risks and previous security issues related to the<br>use of the DATA DIRECTORY and INDEX DIRECTORY directives, users not<br>depending on this feature should consider disabling it by adding<br>"symbolic-links=0" to the "[mysqld]" section of the "my.cnf" configuration<br>file. In this update, an example of such a configuration was added to the<br>default "my.cnf" file.<br>All MySQL users are advised to upgrade to these updated packages, which<br>contain backported patches to resolve these issues. After installing this<br>update, the MySQL server daemon (mysqld) will be restarted automatically.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2010:0109
• agent/software-canonical-lookup
• package-manager/redhat