Re: Clarification: MySQL 3.23 and 4.0 are NOT affected by the recent multibyte SQL injection problem

2006-06-08 Thread Joerg Bruehe
Hi all, unluckily, I made a bad typing error: Joerg Bruehe wrote: this is in reply to various questions that have reached us after the recent security fix, contained in MySQL 4.1.20, 4.0.22, and 5.1.11-beta: of course, this must read 5.0.22 I apologize for any confu

Clarification: MySQL 3.23 and 4.0 are NOT affected by the recent multibyte SQL injection problem

2006-06-08 Thread Joerg Bruehe
Hi, this is in reply to various questions that have reached us after the recent security fix, contained in MySQL 4.1.20, 4.0.22, and 5.1.11-beta: The problem was a possible "SQL injection" risk, if the application sent data using some multi-byte character sets, due to an incorrect parsing