mysql security update

CentOS Errata and Security Advisory CESA-2012:0874

MySQL is a multi-user, multi-threaded SQL database server. It consists of
the MySQL server daemon (mysqld) and many client programs and libraries.

A flaw was found in the way MySQL processed HANDLER READ NEXT statements
after deleting a record. A remote, authenticated attacker could use this
flaw to provide such requests, causing mysqld to crash. This issue only
caused a temporary denial of service, as mysqld was automatically restarted
after the crash. (CVE-2012-2102)

This update also adds the following enhancement:

• The InnoDB storage engine is built-in for all architectures. This update
  adds InnoDB Plugin, the InnoDB storage engine as a plug-in for the 32-bit
  x86, AMD64, and Intel 64 architectures. The plug-in offers additional
  features and better performance than when using the built-in InnoDB storage
  engine. Refer to the MySQL documentation, linked to in the References
  section, for information about enabling the plug-in. (BZ#740224)

All MySQL users should upgrade to these updated packages, which add this
enhancement and contain a backported patch to correct this issue. After
installing this update, the MySQL server daemon (mysqld) will be restarted
automatically.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2012-July/080878.html

Affected packages:
mysql
mysql-bench
mysql-devel
mysql-embedded
mysql-embedded-devel
mysql-libs
mysql-server
mysql-test

Upstream details at:
https://access.redhat.com/errata/RHSA-2012:0874