Since Oracle no longer publishes detailed information about security
vulnerabilities that are being fixed in MySQL, and their bug tracker is
no longer public, Ubuntu must now track upstream MySQL releases as
security updates.
MySQL 5.0.95 fixes the following CVEs:
CVE-2012-0075, CVE-2012-0087, CVE-2012-0101, CVE-2012-0102,
CVE-2012-0114, CVE-2012-0484, CVE-2012-0490.
MySQL 5.1.61 fixes the following CVEs:
CVE-2011-2262, CVE-2012-0075, CVE-2012-0112, CVE-2012-0113,
CVE-2012-0114, CVE-2012-0115, CVE-2012-0116, CVE-2012-0117,
CVE-2012-0118, CVE-2012-0119, CVE-2012-0120, CVE-2012-0484,
CVE-2012-0485, CVE-2012-0486, CVE-2012-0487, CVE-2012-0488,
CVE-2012-0489, CVE-2012-0490, CVE-2012-0491, CVE-2012-0492,
CVE-2012-0493, CVE-2012-0494, CVE-2012-0495, CVE-2012-0496.
For more information about the CVEs listed, please consult the January
2012 Oracle Critical Patch Update Advisory:
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
Today, I have pushed updated MySQL 5.0.95 packages for Ubuntu 8.04 LTS,
and updated MySQL 5.1.61 packages for Ubuntu 10.04 LTS, Ubuntu 10.10,
Ubuntu 11.04 and Ubuntu 11.10 into the -proposed pocket. See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.
Please report any issues in the tracking bug:
https://launchpad.net/bugs/937869
If no issues are reported, I plan on releasing the packages as security
updates in a couple of weeks.
--
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam
04-11-2012, 12:44 PM
Marc Deslauriers
Call for testing: MySQL security updates
Hi,
I have pushed updated MySQL 5.0.96 packages for Ubuntu 8.04 LTS, and
updated MySQL 5.1.62 packages for Ubuntu 10.04 LTS, Ubuntu 11.04 and
Ubuntu 11.10 into the -proposed pocket.
See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how
to enable and use -proposed.
The packages fix the following security issues:
5.1.62:
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-62.html
yaSSL was upgraded from version 1.7.2 to 2.2.0.
Security Fix: Bug #13510739 and Bug #63775 were fixed.
5.0.96:
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-96.html
yaSSL was upgraded from version 1.7.2 to 2.2.0.
Please report any issues in the tracking bug:
https://launchpad.net/bugs/965523
If no issues are reported, I plan on releasing the packages as security
updates in a couple of weeks.
--
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam
Call for testing: MySQL security updates
