4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages, listed in the References section. (CVE-2012-1688, CVE-2012-1690, CVE-2012-1703, CVE-2012-2749, CVE-2012-0540, CVE-2012-1689, CVE-2012-1734, CVE-2012-3163, CVE-2012-3158, CVE-2012-3177, CVE-2012-3166, CVE-2012-3173, CVE-2012-3150, CVE-2012-3180, CVE-2012-3167, CVE-2012-3197, CVE-2012-3160) These updated packages upgrade MySQL to version 5.1.66. Refer to the MySQL release notes listed in the References section for a full list of changes. All MySQL users should upgrade to these updated packages, which correct these issues. After installing this update, the MySQL server daemon (mysqld) will be restarted automatically.
dev.mysql.com/doc/refman/5.1/en/news-5-1-62.html
dev.mysql.com/doc/refman/5.1/en/news-5-1-63.html
dev.mysql.com/doc/refman/5.1/en/news-5-1-64.html
dev.mysql.com/doc/refman/5.1/en/news-5-1-65.html
dev.mysql.com/doc/refman/5.1/en/news-5-1-66.html
rhn.redhat.com/errata/RHSA-2012-1462.html
secunia.com/advisories/48890
secunia.com/advisories/49179
secunia.com/advisories/51309
secunia.com/advisories/53372
security.gentoo.org/glsa/glsa-201308-06.xml
www.mandriva.com/security/advisories?name=MDVSA-2013:150
www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html#AppendixMSQL
www.oracle.com/technetwork/topics/security/cpujul2012-392727.html#AppendixMSQL
www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html#AppendixMSQL
www.securityfocus.com/bid/53067
www.securitytracker.com/id?1026934
access.redhat.com/security/updates/classification/#important
rhn.redhat.com/errata/RHSA-2012-1462.html