mysql-dfsg-4.1 - several vulnerabilities

Several local vulnerabilities have been discovered in the MySQL database
server, which may lead to denial of service. The Common
Vulnerabilities and Exposures project identifies the following problems:

• CVE-2006-3081
  “Kanatoko” discovered that the server can be crashed with feeding
  NULL values to the str_to_date() function.
• CVE-2006-3469
  Jean-David Maillefer discovered that the server can be crashed with
  specially crafted date_format() function calls.

For the stable distribution (sarge) these problems have been fixed in
version 4.1.11a-4sarge5.

For the unstable distribution (sid) does no longer contain MySQL 4.1
packages. MySQL 5.0 from sid is not affected.

We recommend that you upgrade your mysql-dfsg-4.1 packages.