Steven M. Christey wrote: > > > > * Fixed DoS bug where any user could crash the server with > > > > "SELECT date_format('%d%s', 1); (CVE-2006-XXXX). > > > > The vulnerability was discovered by Maillefer Jean-David > > > > <[EMAIL PROTECTED]> and filed as MySQL bug #20729. > > > > Closes: #375694
Package is pushed to the buildds. > Use CVE-2006-3469 > > Is this "public enough" for me to update the CVE descriptions, or should I > leave them as reserved for now? CVE will probably be the first point of > widespread disclosure. Sure, please go ahead. Cheers, Moritz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]