subject:"\[Openstack\] MySQL \/ MariaDB security vulnerability"

Re: [Openstack] MySQL / MariaDB security vulnerability

2012-06-11 Thread David Busby

Thanks Ewan, Please note my findings on this CVE and feel free to correct / reply with anything I have missed. I've found in my tests of this CVE today that Percona 55-5.5.24 is not vulnerable (http://repo.percona.com/centos/6/os/x86_64/Percona-Server-server-55-5.5.24-rel26.0.256.rhel6.x86_64.rpm

[Openstack] MySQL / MariaDB security vulnerability

2012-06-11 Thread Ewan Mellor

Anyone who is using OpenStack with MySQL / MariaDB, please see this _extremely_ dangerous security vulnerability, announced on Saturday: https://community.rapid7.com/community/metasploit/blog/2012/06/11/cve-2012-2122-a-tragically-comedic-security-flaw-in-mysql Ewan.