[SECURITY] [DSA 2429-1] mysql-5.1 security update

2012-03-0720:45:13

lists.debian.org

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:N/A:P

0.007 Low

EPSS

Percentile

79.8%

JSON

Debian Security Advisory DSA-2429-1 [email protected]
http://www.debian.org/security/ Florian Weimer
March 07, 2012 http://www.debian.org/security/faq

Package : mysql-5.1
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE ID : CVE-2011-2262 CVE-2012-0075 CVE-2012-0087 CVE-2012-0101
CVE-2012-0102 CVE-2012-0112 CVE-2012-0113 CVE-2012-0114
CVE-2012-0115 CVE-2012-0116 CVE-2012-0118 CVE-2012-0119
CVE-2012-0120 CVE-2012-0484 CVE-2012-0485 CVE-2012-0490
CVE-2012-0492
Debian Bug : 659687

Several security vulnerabilities were discovered in MySQL, a database
management system. The vulnerabilities are addressed by upgrading
MySQL to a new upstream version, 5.1.61, which includes additional
changes, such as performance improvements and corrections for data
loss defects. These changes are described in the MySQL release notes
at: http://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html

For the stable distribution (squeeze), these problems have been fixed
in version 5.1.61-0+squeeze1.

For the unstable distribution (sid), these problems have been fixed in
version 5.1.61-2.

We recommend that you upgrade your mysql-5.1 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian6allmysql-client< 5.1.61-0+squeeze1mysql-client_5.1.61-0+squeeze1_all.deb
Debian6allmysql-server< 5.1.61-0+squeeze1mysql-server_5.1.61-0+squeeze1_all.deb
Debian6alllibmysqlclient-dev< 5.1.61-0+squeeze1libmysqlclient-dev_5.1.61-0+squeeze1_all.deb
Debian6allmysql-server-core-5.1< 5.1.61-0+squeeze1mysql-server-core-5.1_5.1.61-0+squeeze1_all.deb
Debian6allmysql-5.1< 5.1.61-0+squeeze1mysql-5.1_5.1.61-0+squeeze1_all.deb
Debian6allmysql-client-5.1< 5.1.61-0+squeeze1mysql-client-5.1_5.1.61-0+squeeze1_all.deb
Debian6allmysql-server-5.1< 5.1.61-0+squeeze1mysql-server-5.1_5.1.61-0+squeeze1_all.deb
Debian6alllibmysqlclient16< 5.1.61-0+squeeze1libmysqlclient16_5.1.61-0+squeeze1_all.deb
Debian6alllibmysqld-dev< 5.1.61-0+squeeze1libmysqld-dev_5.1.61-0+squeeze1_all.deb
Debian6alllibmysqld-pic< 5.1.61-0+squeeze1libmysqld-pic_5.1.61-0+squeeze1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	all	mysql-client	< 5.1.61-0+squeeze1	mysql-client_5.1.61-0+squeeze1_all.deb
Debian	6	all	mysql-server	< 5.1.61-0+squeeze1	mysql-server_5.1.61-0+squeeze1_all.deb
Debian	6	all	libmysqlclient-dev	< 5.1.61-0+squeeze1	libmysqlclient-dev_5.1.61-0+squeeze1_all.deb
Debian	6	all	mysql-server-core-5.1	< 5.1.61-0+squeeze1	mysql-server-core-5.1_5.1.61-0+squeeze1_all.deb
Debian	6	all	mysql-5.1	< 5.1.61-0+squeeze1	mysql-5.1_5.1.61-0+squeeze1_all.deb
Debian	6	all	mysql-client-5.1	< 5.1.61-0+squeeze1	mysql-client-5.1_5.1.61-0+squeeze1_all.deb
Debian	6	all	mysql-server-5.1	< 5.1.61-0+squeeze1	mysql-server-5.1_5.1.61-0+squeeze1_all.deb
Debian	6	all	libmysqlclient16	< 5.1.61-0+squeeze1	libmysqlclient16_5.1.61-0+squeeze1_all.deb
Debian	6	all	libmysqld-dev	< 5.1.61-0+squeeze1	libmysqld-dev_5.1.61-0+squeeze1_all.deb
Debian	6	all	libmysqld-pic	< 5.1.61-0+squeeze1	libmysqld-pic_5.1.61-0+squeeze1_all.deb