root a écrit :

apticron report [Mon, 14 Jul 2008 06:51:01 +0200] ========================================================================

apticron has detected that some packages need upgrading on:

weblipn.lipn.univ-paris13.fr [ 10.10.0.68 ]

The following packages are currently pending an upgrade:

libmysqlclient15off 5.0.32-7etch6 mysql-client 5.0.32-7etch6 mysql-client-5.0 5.0.32-7etch6 mysql-common 5.0.32-7etch6 mysql-server 5.0.32-7etch6 mysql-server-5.0 5.0.32-7etch6

========================================================================

Package Details:

Reading changelogs... --- Modifications pour mysql-dfsg-5.0 (libmysqlclient15off mysql-client mysql-client-5.0 mysql-common mysql-server mysql-server-5.0) --- mysql-dfsg-5.0 (5.0.32-7etch6) stable-security; urgency=high

* Non-maintainer upload by the security team. * Backport a corrected form of upstream's fix for CVE-2008-2079, which allowed local users to bypass authorization checks by creating MyISAM tables using specific DATA DIRECTORY or INDEX DIRECTORY arguments within the MySQL data directory subsequently used by tables in other databases to which they would not normally have access. Note that this alters the behavior of table creation in that it disallows specification of data or index directories in or under mysqld's own homedir. * Adjust 95_SECURITY_CVE-2007-3781.dpatch, introduced in 5.0.32-7etch4, so as not to drop a spurious rejected patch file during the build.

-- Devin Carraway <devin@debian.org> Tue, 6 Jul 2008 07:59:50 +0000

done