i just got an-email from redhat network saying:

Red Hat Network has determined that the following advisory is
applicable to
one or more of the systems you have registered:

Complete information about this errata can be found at the following
location:
https://rhn.redhat.com/network/errata/errat...ls.pxt?eid=1859

Security Advisory - RHSA-2003:281-08
------------------------------------------------------------------------------
Summary:
Updated MySQL packages fix vulnerability

Updated MySQL server packages fix a buffer overflow vulnerability.

Description:
MySQL is a multi-user, multi-threaded SQL database server.

Frank Denis reported a bug in unpatched versions of MySQL prior to
version
3.23.58. Passwords for MySQL users are stored in the Password field of
the
user table. Under this bug, a Password field with a value greater than
16
characters can cause a buffer overflow. It may be possible for an
attacker
with the ability to modify the user table to exploit this buffer
overflow
to execute arbitrary code as the MySQL user. The Common Vulnerabilities
and
Exposures project (cve.mitre.org) has assigned the name CAN-2003-0780
to
this issue.

Users of MySQL are advised to upgrade to these erratum packages
containing
MySQL 3.23.58, which is not vulnerable to this issue.

References:
http://www.mysql.com/doc/en/News-3.23.58.html
http://www.mysql.com/doc/en/News-3.23.57.html


can i upgrade it from cpanel or i have to go and download some files from mysql???

Have you found your answer to this.

not yet

I am getting the run-around with Cpanel. They are saying it can't be done. However it is affecting the OsCommerce and InvisionBoard installation as well. I told them those two items worked before I did the upgrade a couple of days ago.

??

so, do we have to wait 4 cpanel????

i dont what to do???




or just ignore it

I just got a message from them that the BETA that was released this morning about 20 minutes ago apparently will fix the issue, I am installing it now hoping like heck that everything works after the fact.

waw


iam going

Well that did not do it and I went with BETA 18.