Re: pkg/38875: mysql5-{server,client} are vulnerable to a security-bypass

[Adrian Portelli <adrianp%stindustries.net@localhost>]

The following reply was made to PR pkg/38875; it has been noted by GNATS.

From: Adrian Portelli <adrianp%stindustries.net@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: pkg/38875: mysql5-{server,client} are vulnerable to a 
security-bypass
Date: Fri, 06 Jun 2008 08:34:25 +0100

 César Catrián Carreño wrote:
 >> Description:
 > 
 > 
 > mysql5 is marked as vulnerable to a security bypass detailed at
 > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2079 .
 
 We're (pkgsrc-security@) aware of this and tracking the issue in a 
 separate ticket.  5.0.60 has not been released yet and that contains the 
 fix.
 
 adrian.