DSA-303 mysql - privilege escalation

Bulletin has no description...

Signed/unsigned conversion bug in OpenBSD select() call

By passing negative argument to select function it's possible to overwrite the fragment of kernel memory...