This bug was fixed in the package mysql-dfsg-5.0 - 5.0.95-0ubuntu1 --------------- mysql-dfsg-5.0 (5.0.95-0ubuntu1) hardy-security; urgency=low
* SECURITY UPDATE: Update to 5.0.95 to fix multiple security issues (LP: #937869) - http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html - CVE-2012-0075 - CVE-2012-0087 - CVE-2012-0101 - CVE-2012-0102 - CVE-2012-0114 - CVE-2012-0484 - CVE-2012-0490 * Dropped patches unnecessary with 5.0.95: - debian/patches/91_SECURITY_CVE-2007-5925.dpatch - debian/patches/95_SECURITY_CVE-2008-3963.dpatch - debian/patches/96_SECURITY_CVE-2008-4098.dpatch - debian/patches/97_CVE-2008-4456.dpatch - debian/patches/97_CVE-2009-2446.dpatch - debian/patches/97_CVE-2009-4019.dpatch - debian/patches/97_CVE-2009-4030.dpatch - debian/patches/98_CVE-2009-4484.dpatch - debian/patches/99_ssl_test_certs.dpatch - debian/patches/100_CVE-2010-1850.dpatch - debian/patches/101_CVE-2010-1849.dpatch - debian/patches/102_CVE-2010-1848.dpatch - debian/patches/103_CVE-2010-1626.dpatch - debian/patches/98_CVE-2010-3677.dpatch - debian/patches/98_CVE-2010-3680.dpatch - debian/patches/98_CVE-2010-3681.dpatch - debian/patches/98_CVE-2010-3682.dpatch - debian/patches/98_CVE-2010-3833.dpatch - debian/patches/98_CVE-2010-3834.dpatch - debian/patches/98_CVE-2010-3835.dpatch - debian/patches/98_CVE-2010-3836.dpatch - debian/patches/98_CVE-2010-3837.dpatch - debian/patches/98_CVE-2010-3838.dpatch - debian/patches/98_CVE-2010-3840.dpatch - debian/patches/45_warn-CLI-passwords.dpatch - debian/patches/50_fix_mysqldump.dpatch - debian/patches/51_incorrect-order.dpatch - debian/patches/52_ndb-gcc-4.2.dpatch - debian/patches/53_integer-gcc-4.2.dpatch - debian/patches/54_ssl-client-support.dpatch - debian/patches/55_testsuite-2008.dpatch - debian/patches/58-disable-ndb-backup-print.dpatch - debian/patches/59-fix-mysql-replication-logs.dpatch - debian/patches/86_PATH_MAX.dpatch - debian/patches/90_upstreamdebiandir.dpatch - debian/patches/92_fix_order_by32202.dpatch - debian/patches/93_fix_user_setup_on_localhost.dpatch - debian/patches/94_fix_mysqldump_with_old_versions.dpatch - debian/patches/56-mysqlhotcopy-invalid-dbtable.dpatch - debian/patches/57-fix-mysqlslowdump-config.dpatch * debian/mysql-client-5.0.docs, debian/mysql-server-5.0.docs: removed EXCEPTIONS-CLIENT file * debian/libmysqlclient15-dev.docs, debian/libmysqlclient15off.docs: removed, no longer necessary. * debian/patches/25_mysys__default.c.dpatch: updated for 5.0.95. * debian/mysql-server-5.0.files: change ndb_mgmd and ndbd manpage locations. Removed mysqlmanagerc.1 and mysqlmanager-pwgen.1 -- Marc Deslauriers <marc.deslauri...@ubuntu.com> Thu, 23 Feb 2012 11:21:11 -0500 ** Changed in: mysql-dfsg-5.0 (Ubuntu Hardy) Status: Confirmed => Fix Released ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2007-5925 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-3963 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-4098 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-4456 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-2446 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-4019 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-4030 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-4484 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-1626 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-1848 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-1849 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-1850 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3677 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3680 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3681 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3682 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3833 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3834 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3835 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3836 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3837 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3838 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3840 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0075 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0087 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0101 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0102 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0114 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0484 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0490 ** Changed in: mysql-dfsg-5.1 (Ubuntu Lucid) Status: Confirmed => Fix Released ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-7247 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-1621 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-2008 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3678 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3679 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3683 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-3839 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2011-2262 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0112 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0113 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0115 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0116 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0117 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0118 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0119 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0120 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0485 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0486 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0487 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0488 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0489 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0491 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0492 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0493 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0494 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0495 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-0496 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-5.1 in Ubuntu. https://bugs.launchpad.net/bugs/937869 Title: MySQL security update tracking bug To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-5.1/+bug/937869/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs