mysql-5.5: Multiple security fixes from January 2015 CPU

Related Vulnerabilities: CVE-2014-6568   CVE-2015-0374   CVE-2015-0381   CVE-2015-0382   CVE-2015-0411   CVE-2015-0432  

Debian Bug report logs - #775881
mysql-5.5: Multiple security fixes from January 2015 CPU

version graph

Reported by: Salvatore Bonaccorso <carnil@debian.org>

Date: Wed, 21 Jan 2015 05:45:02 UTC

Severity: grave

Tags: fixed-upstream, patch, security, upstream

Found in version mysql-5.5/5.5.23-2

Fixed in versions mysql-5.5/5.5.41-0+wheezy1, mysql-5.5/5.5.42-1

Done: James Page <james.page@ubuntu.com>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, carnil@debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>:
Bug#775881; Package src:mysql-5.5. (Wed, 21 Jan 2015 05:45:06 GMT) (full text, mbox, link).


Acknowledgement sent to Salvatore Bonaccorso <carnil@debian.org>:
New Bug report received and forwarded. Copy sent to carnil@debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>. (Wed, 21 Jan 2015 05:45:07 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: mysql-5.5: Multiple security fixes from January 2015 CPU
Date: Wed, 21 Jan 2015 06:40:21 +0100
Source: mysql-5.5
Version: 5.5.23-2
Severity: grave
Tags: security upstream patch fixed-upstream

Hi

As usual at this time of the year, there was a new Oracle Patch Update
including updates for MySQL, see:

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixMSQL

Regards,
Salvatore



Information forwarded to debian-bugs-dist@lists.debian.org, Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>:
Bug#775881; Package src:mysql-5.5. (Wed, 21 Jan 2015 19:18:05 GMT) (full text, mbox, link).


Acknowledgement sent to Salvatore Bonaccorso <carnil@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>. (Wed, 21 Jan 2015 19:18:05 GMT) (full text, mbox, link).


Message #10 received at 775881@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: 775881@bugs.debian.org
Subject: Re: Bug#775881: mysql-5.5: Multiple security fixes from January 2015 CPU
Date: Wed, 21 Jan 2015 20:14:49 +0100
Hi MySQL maintainers,

For wheezy-security I'm just building the package with imported
version 5.5.41 to resolve the issues. Can say more if build suceeds.

Regards,
Salvatore



Information forwarded to debian-bugs-dist@lists.debian.org, Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>:
Bug#775881; Package src:mysql-5.5. (Wed, 21 Jan 2015 21:33:07 GMT) (full text, mbox, link).


Acknowledgement sent to Salvatore Bonaccorso <carnil@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>. (Wed, 21 Jan 2015 21:33:07 GMT) (full text, mbox, link).


Message #15 received at 775881@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: 775881@bugs.debian.org
Cc: team@security.debian.org
Subject: Re: Bug#775881: mysql-5.5: Multiple security fixes from January 2015 CPU
Date: Wed, 21 Jan 2015 22:28:01 +0100
Hi Debian MySQL maintainers,

Preliminary packages built for the wheezy-security update are now in

https://people.debian.org/~carnil/tmp/mysql-5.5/

If you additionally can test these too, that would be great.

Regards,
Salvatore



Information forwarded to debian-bugs-dist@lists.debian.org, Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>:
Bug#775881; Package src:mysql-5.5. (Thu, 22 Jan 2015 13:51:10 GMT) (full text, mbox, link).


Acknowledgement sent to James Page <james.page@ubuntu.com>:
Extra info received and forwarded to list. Copy sent to Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>. (Thu, 22 Jan 2015 13:51:10 GMT) (full text, mbox, link).


Message #20 received at 775881@bugs.debian.org (full text, mbox, reply):

From: James Page <james.page@ubuntu.com>
To: Salvatore Bonaccorso <carnil@debian.org>, 775881@bugs.debian.org
Subject: Re: [debian-mysql] Bug#775881: mysql-5.5: Multiple security fixes from January 2015 CPU
Date: Thu, 22 Jan 2015 13:48:46 +0000
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 21/01/15 19:14, Salvatore Bonaccorso wrote:
> For wheezy-security I'm just building the package with imported 
> version 5.5.41 to resolve the issues. Can say more if build
> suceeds.

I've pushed commits to git.debian.org for unstable; should fine time
to build and test in the next day or so.

Thanks for doing the wheezy update.

Cheers

James


- -- 
James Page
Ubuntu and Debian Developer
james.page@ubuntu.com
jamespage@debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=8K/g
-----END PGP SIGNATURE-----



Reply sent to Salvatore Bonaccorso <carnil@debian.org>:
You have taken responsibility. (Thu, 29 Jan 2015 19:21:11 GMT) (full text, mbox, link).


Notification sent to Salvatore Bonaccorso <carnil@debian.org>:
Bug acknowledged by developer. (Thu, 29 Jan 2015 19:21:11 GMT) (full text, mbox, link).


Message #25 received at 775881-close@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: 775881-close@bugs.debian.org
Subject: Bug#775881: fixed in mysql-5.5 5.5.41-0+wheezy1
Date: Thu, 29 Jan 2015 19:17:07 +0000
Source: mysql-5.5
Source-Version: 5.5.41-0+wheezy1

We believe that the bug you reported is fixed in the latest version of
mysql-5.5, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 775881@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated mysql-5.5 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 21 Jan 2015 20:04:11 +0100
Source: mysql-5.5
Binary: libmysqlclient18 libmysqld-pic libmysqld-dev libmysqlclient-dev mysql-common mysql-client-5.5 mysql-server-core-5.5 mysql-server-5.5 mysql-server mysql-client mysql-testsuite-5.5 mysql-source-5.5
Architecture: source all amd64
Version: 5.5.41-0+wheezy1
Distribution: wheezy-security
Urgency: high
Maintainer: Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description: 
 libmysqlclient-dev - MySQL database development files
 libmysqlclient18 - MySQL database client library
 libmysqld-dev - MySQL embedded database development files
 libmysqld-pic - PIC version of MySQL embedded server development files
 mysql-client - MySQL database client (metapackage depending on the latest versio
 mysql-client-5.5 - MySQL database client binaries
 mysql-common - MySQL database common files, e.g. /etc/mysql/my.cnf
 mysql-server - MySQL database server (metapackage depending on the latest versio
 mysql-server-5.5 - MySQL database server binaries and system database setup
 mysql-server-core-5.5 - MySQL database server binaries
 mysql-source-5.5 - MySQL source
 mysql-testsuite-5.5 - MySQL testsuite
Closes: 775881
Changes: 
 mysql-5.5 (5.5.41-0+wheezy1) wheezy-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Imported Upstream version 5.5.41 to fix security issues:
     - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
     - CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382,
       CVE-2015-0411, CVE-2015-0432
     (Closes: #775881)
Checksums-Sha1: 
 45ac821c2d4d5d0a6f855ac71f3574c682dc9094 2955 mysql-5.5_5.5.41-0+wheezy1.dsc
 f12317efdd5b2c539ed14c7a7c69135822916419 21768300 mysql-5.5_5.5.41.orig.tar.gz
 eaa54765980bad71c67db272f085126eb766dc0f 376771 mysql-5.5_5.5.41-0+wheezy1.debian.tar.gz
 64dbfd4227825a179164a0aa221f37262c0ed457 78442 mysql-common_5.5.41-0+wheezy1_all.deb
 d2483df2aae95dbb1178ac621bd6d0b8ef25d35f 76720 mysql-server_5.5.41-0+wheezy1_all.deb
 6a92aaf4ac0f111dc0a080724e153763dc208893 76592 mysql-client_5.5.41-0+wheezy1_all.deb
 c302a139d604695fd01ca8e5970ee2ff7b5addd0 682470 libmysqlclient18_5.5.41-0+wheezy1_amd64.deb
 08e19077f12cd9827474404040ccd7571fb6823c 3172918 libmysqld-pic_5.5.41-0+wheezy1_amd64.deb
 562eb291d6e3fd18b5c08b6d71805dc9ad8c4051 3172868 libmysqld-dev_5.5.41-0+wheezy1_amd64.deb
 082fc701d2584d706a340cef0c7b40e513e5fd43 950422 libmysqlclient-dev_5.5.41-0+wheezy1_amd64.deb
 e7c4ba1fee36077f9a07c257d4bc9a16bcdc407b 1890654 mysql-client-5.5_5.5.41-0+wheezy1_amd64.deb
 ee411794c4f7797867b3e8d9f68594f99cbb3495 3800548 mysql-server-core-5.5_5.5.41-0+wheezy1_amd64.deb
 f5b30e2da6f3c8975ea72a4da7b1e428cdaaafed 2099988 mysql-server-5.5_5.5.41-0+wheezy1_amd64.deb
 30d6f0b1b1cdb31bed59965895bc4f6d1e48073c 4258968 mysql-testsuite-5.5_5.5.41-0+wheezy1_amd64.deb
 61d65df4d505dec4043e7df092af1eda8c4f6689 22905822 mysql-source-5.5_5.5.41-0+wheezy1_amd64.deb
Checksums-Sha256: 
 b6cd0d1baf4e0ca7b8810fd6d33f9d2520d03536cf5f64e2389960e56742746b 2955 mysql-5.5_5.5.41-0+wheezy1.dsc
 ec642fc5be5ea03b24a0c5189204675fb3794dee772314ace650623c1c994844 21768300 mysql-5.5_5.5.41.orig.tar.gz
 1ea522e464821427f741eb018576fd2aa494cfd74bc3a49eaa17593b47cb80d9 376771 mysql-5.5_5.5.41-0+wheezy1.debian.tar.gz
 de3c0a15204b10888199650934f84acd4224b4a5ef7c98ba522f90ea9f114301 78442 mysql-common_5.5.41-0+wheezy1_all.deb
 b051e4a1b6dc2c0fc04746a943935aca1aa991abb65398c59a0bd39b05a759e8 76720 mysql-server_5.5.41-0+wheezy1_all.deb
 047150e163e9b4440b0f600a317124bff6143041f893105a7bcfef4f157ef76b 76592 mysql-client_5.5.41-0+wheezy1_all.deb
 1197ae7090f4aac0ef6f197caba64f569e9aad8d232a5da86a2c40a3814f6bf4 682470 libmysqlclient18_5.5.41-0+wheezy1_amd64.deb
 17b33ac72263ae5a711285243dbd201e0524aa6480822d44553373bd18014033 3172918 libmysqld-pic_5.5.41-0+wheezy1_amd64.deb
 1528b474b924cab47963f6075a8cf46f5fbe413fdc703cb41a2e5bb51ea627d8 3172868 libmysqld-dev_5.5.41-0+wheezy1_amd64.deb
 5246f378b3652ef13a8e89af8c2bdee091ec8b980a0ebc539a673c2f5d972183 950422 libmysqlclient-dev_5.5.41-0+wheezy1_amd64.deb
 acdb7fb2c046334b7dcbcc185745a9f138dfe39acc6b29ca78d2e57339e6c7ea 1890654 mysql-client-5.5_5.5.41-0+wheezy1_amd64.deb
 f0b6aa6f055cc6ee59826e9827041113afff570dba053ef35879e65d410eb83b 3800548 mysql-server-core-5.5_5.5.41-0+wheezy1_amd64.deb
 89d98335cd32fc03eb5d131dd6b69aea0aeb0c9a96ca0b0f200b9d25ca7aaa6a 2099988 mysql-server-5.5_5.5.41-0+wheezy1_amd64.deb
 fce9cf423e858831d49ffd76ca2694c7c563e4f2a77e0cd3b16ad8170927dd78 4258968 mysql-testsuite-5.5_5.5.41-0+wheezy1_amd64.deb
 63f1334ce87645370508aaf23b6a105b775afb35d85e88a8e28ec20db9f38639 22905822 mysql-source-5.5_5.5.41-0+wheezy1_amd64.deb
Files: 
 1f8eb8e0425213f190b246f37ca70179 2955 database optional mysql-5.5_5.5.41-0+wheezy1.dsc
 211ace59652eed6fb0e5cfd76834afab 21768300 database optional mysql-5.5_5.5.41.orig.tar.gz
 5deab78e2d9faa25e0908904477a8f1c 376771 database optional mysql-5.5_5.5.41-0+wheezy1.debian.tar.gz
 04eca773b8b7834fa294c3830d9a23a2 78442 database optional mysql-common_5.5.41-0+wheezy1_all.deb
 2c829abfd00d661c9acf580e68663104 76720 database optional mysql-server_5.5.41-0+wheezy1_all.deb
 2fcfc51223d3a173ef25548351fe1972 76592 database optional mysql-client_5.5.41-0+wheezy1_all.deb
 d7c5a9cf98d788b1d4eb692c34ef7499 682470 libs optional libmysqlclient18_5.5.41-0+wheezy1_amd64.deb
 995f9aba52a3d44eae7ae5d3f8d7e260 3172918 libdevel optional libmysqld-pic_5.5.41-0+wheezy1_amd64.deb
 14eb735fb5f65a497da01a77c0b75a3c 3172868 libdevel optional libmysqld-dev_5.5.41-0+wheezy1_amd64.deb
 fae1e7a5aa8b7a81be7c41d5e9e257ee 950422 libdevel optional libmysqlclient-dev_5.5.41-0+wheezy1_amd64.deb
 506d70477eebdf518b85000031eab2ec 1890654 database optional mysql-client-5.5_5.5.41-0+wheezy1_amd64.deb
 1cabded121eec636f79e38b2cc1c7754 3800548 database optional mysql-server-core-5.5_5.5.41-0+wheezy1_amd64.deb
 b80a07775ba75c26c9ea36eda25df18f 2099988 database optional mysql-server-5.5_5.5.41-0+wheezy1_amd64.deb
 8517ca6eda1dd96929f59c87dedab3eb 4258968 database optional mysql-testsuite-5.5_5.5.41-0+wheezy1_amd64.deb
 296b156b938770951a699c1919104dcb 22905822 database optional mysql-source-5.5_5.5.41-0+wheezy1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=K7I8
-----END PGP SIGNATURE-----




Information forwarded to debian-bugs-dist@lists.debian.org, Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>:
Bug#775881; Package src:mysql-5.5. (Fri, 06 Feb 2015 13:12:04 GMT) (full text, mbox, link).


Acknowledgement sent to Salvatore Bonaccorso <carnil@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>. (Fri, 06 Feb 2015 13:12:04 GMT) (full text, mbox, link).


Message #30 received at 775881@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: James Page <james.page@ubuntu.com>, 775881@bugs.debian.org
Subject: Re: Bug#775881: [debian-mysql] Bug#775881: mysql-5.5: Multiple security fixes from January 2015 CPU
Date: Fri, 6 Feb 2015 14:08:16 +0100
Hi James,

On Thu, Jan 22, 2015 at 01:48:46PM +0000, James Page wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> On 21/01/15 19:14, Salvatore Bonaccorso wrote:
> > For wheezy-security I'm just building the package with imported 
> > version 5.5.41 to resolve the issues. Can say more if build
> > suceeds.
> 
> I've pushed commits to git.debian.org for unstable; should fine time
> to build and test in the next day or so.

Did you had a chance to look at the upload to unstable so that it can
be included into jessie?

Regards,
Salvatore



Information forwarded to debian-bugs-dist@lists.debian.org, Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>:
Bug#775881; Package src:mysql-5.5. (Fri, 06 Feb 2015 16:33:04 GMT) (full text, mbox, link).


Acknowledgement sent to James Page <james.page@ubuntu.com>:
Extra info received and forwarded to list. Copy sent to Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>. (Fri, 06 Feb 2015 16:33:04 GMT) (full text, mbox, link).


Message #35 received at 775881@bugs.debian.org (full text, mbox, reply):

From: James Page <james.page@ubuntu.com>
To: Salvatore Bonaccorso <carnil@debian.org>, 775881@bugs.debian.org
Subject: Re: Bug#775881: [debian-mysql] Bug#775881: mysql-5.5: Multiple security fixes from January 2015 CPU
Date: Fri, 06 Feb 2015 18:30:48 +0200
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Salvatore

On 06/02/15 15:08, Salvatore Bonaccorso wrote:
>> On 21/01/15 19:14, Salvatore Bonaccorso wrote:
>>> For wheezy-security I'm just building the package with imported
>>>  version 5.5.41 to resolve the issues. Can say more if build 
>>> suceeds.
>> 
>> I've pushed commits to git.debian.org for unstable; should fine
>> time to build and test in the next day or so.
> 
> Did you had a chance to look at the upload to unstable so that it
> can be included into jessie?

I did but instantly got blocked by an expired certificate in the test
suite; I think Akhil has pushed fixes + .42 point release to git but
I've been away/travelling for the past week so have not had time to
review/upload - I'll look when I get back on Mondau.

Apologies for the lag

- -- 
James Page
Ubuntu and Debian Developer
james.page@ubuntu.com
jamespage@debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCAAGBQJU1OwrAAoJEL/srsug59jDz+gP/1kwgRytQaiBhb4BxjvNYdZB
U7MUpaLV04SL9Awm2/J3WxCwrwoeyyY2o7huOTkt69+bUEiCxD8wTYhV3X8uSAjR
v3vubpKDYnImnFK9e4FDlIDRXaZWmRJzQ+MzYT3Zs7ys2k1jQL1HVFgR3PEazzEI
oBus0Yz+XbHFNOiurrIsuvN+iN7gLL0AbSg2Zz0rTE2iSzdOvVqygj15LTXOmtye
ydIanhkJKKwMeiKkUYe/8ZEeP9Qn1DeCsFQ+LzU1KYT4L41HudTHG02NGLmOfNUm
g3MUHTG6ZmoNgpmrX6IiOGj5fhaHlc9+DEdngG5NNQ81NgPG8qKNu381G9y/iVd1
G04Ht+47TmrJGmtvlxjUOK2O3HLTgxpn9r5Pco1L+64JX4gccmcmz9RK5Aq6VI+3
pU59ocggW+pFkPP5yWgP+S+TLeKzQZl8227weLDz3XJ1Yc52mNTi/fW1IlZhR7jj
BCgG0vWJxikmMRuyD6auMt2QxLximRIYQr7rYuU9ccz4GgojMjVBAnOz0PKzNRe4
XNLA/cvAd8atdp++TtYgqLLa148qpdvqnURbjzwCfyfkb3yuiQYxo7FMs+qH/Ltj
H7qUvdZFGTGn/axedO5+aS1iNRxKUb5fN8d3AzxhbD7fm7C7YFrSH5qZjMf6Nu9C
ogq88X5HGmbK/pmknT3A
=QHlS
-----END PGP SIGNATURE-----



Reply sent to James Page <james.page@ubuntu.com>:
You have taken responsibility. (Mon, 09 Feb 2015 15:39:11 GMT) (full text, mbox, link).


Notification sent to Salvatore Bonaccorso <carnil@debian.org>:
Bug acknowledged by developer. (Mon, 09 Feb 2015 15:39:11 GMT) (full text, mbox, link).


Message #40 received at 775881-close@bugs.debian.org (full text, mbox, reply):

From: James Page <james.page@ubuntu.com>
To: 775881-close@bugs.debian.org
Subject: Bug#775881: fixed in mysql-5.5 5.5.42-1
Date: Mon, 09 Feb 2015 15:34:38 +0000
Source: mysql-5.5
Source-Version: 5.5.42-1

We believe that the bug you reported is fixed in the latest version of
mysql-5.5, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 775881@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
James Page <james.page@ubuntu.com> (supplier of updated mysql-5.5 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 09 Feb 2015 14:12:44 +0000
Source: mysql-5.5
Binary: libmysqlclient18 libmysqld-pic libmysqld-dev libmysqlclient-dev mysql-common mysql-client-5.5 mysql-server-core-5.5 mysql-server-5.5 mysql-server mysql-client mysql-testsuite mysql-testsuite-5.5 mysql-source-5.5
Architecture: source all amd64
Version: 5.5.42-1
Distribution: unstable
Urgency: medium
Maintainer: Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>
Changed-By: James Page <james.page@ubuntu.com>
Description:
 libmysqlclient-dev - MySQL database development files
 libmysqlclient18 - MySQL database client library
 libmysqld-dev - MySQL embedded database development files
 libmysqld-pic - PIC version of MySQL embedded server development files
 mysql-client - MySQL database client (metapackage depending on the latest versio
 mysql-client-5.5 - MySQL database client binaries
 mysql-common - MySQL database common files, e.g. /etc/mysql/my.cnf
 mysql-server - MySQL database server (metapackage depending on the latest versio
 mysql-server-5.5 - MySQL database server binaries and system database setup
 mysql-server-core-5.5 - MySQL database server binaries
 mysql-source-5.5 - MySQL source
 mysql-testsuite - MySQL testsuite
 mysql-testsuite-5.5 - MySQL testsuite
Closes: 677222 775881
Changes:
 mysql-5.5 (5.5.42-1) unstable; urgency=medium
 .
   [ James Page ]
   * SECURITY UPDATE: Update to 5.5.41 to fix security issues:
     - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
     - CVE-2015-0411, CVE-2015-0382, CVE-2015-0381, CVE-2015-0432,
       CVE-2014-6568, CVE-2015-0374
     (Closes: #775881).
   * d/p/fix-func_math-test-failure.patch: Dropped, included upstream.
 .
   [ Akhil Mohan ]
   * New upstream version, resolving date driven test failures in certs.
   * Example option in log_slow_queries d/additions/my.cnf is deprecated
     and replaced with options slow_query_log_file and slow_query_log.
     (Closes: #677222)
Checksums-Sha1:
 cca8fce8e9aebc95eb4f8a991b1e48c0dee2ac7f 3065 mysql-5.5_5.5.42-1.dsc
 29f9c31f3857283c58e5887ea6479faa26a509dd 21795431 mysql-5.5_5.5.42.orig.tar.gz
 b9ff873b92f42bf9bee92627207b2b430b8e41ef 231316 mysql-5.5_5.5.42-1.debian.tar.xz
 3bed5f9fc973ab316fc9a0ac9568c22ec197a08d 74152 mysql-common_5.5.42-1_all.deb
 39a77adc993709df31ae995e9926120b01ec98b7 72388 mysql-server_5.5.42-1_all.deb
 c22e2e63b774b7f7fa0a539a7983fa45a8fb64fc 72260 mysql-client_5.5.42-1_all.deb
 169991d8196c4d4d5f5292c3a2be8802056f16c0 72236 mysql-testsuite_5.5.42-1_all.deb
 7677fe4435ae6fdd231cd316af39643d518f2821 662744 libmysqlclient18_5.5.42-1_amd64.deb
 1a976df71b642e56c837c4084851efdee8709cf0 3257516 libmysqld-pic_5.5.42-1_amd64.deb
 3b1af9aa19469dbc660b9f52d31c001715202690 3256742 libmysqld-dev_5.5.42-1_amd64.deb
 70d5d776f614463ebf713f243ca67ad3ac878d7f 942524 libmysqlclient-dev_5.5.42-1_amd64.deb
 60d39127d2d767c76faaa64118b0daa4c1331699 1815424 mysql-client-5.5_5.5.42-1_amd64.deb
 311f997c2ffe616e0db438cba62ff4c354511d04 3723500 mysql-server-core-5.5_5.5.42-1_amd64.deb
 25c1ef38fc3b085cae2f123331033a065d60411f 2006692 mysql-server-5.5_5.5.42-1_amd64.deb
 17b649040fc07a82c109ddebc95fb93ec18c54ec 4356012 mysql-testsuite-5.5_5.5.42-1_amd64.deb
 e514facd5bd39cc527d891bdf4c56e751ff389fd 22964178 mysql-source-5.5_5.5.42-1_amd64.deb
Checksums-Sha256:
 8e2199680b571565d6fbfe3420a8e548e0f50e66218ae4f7b7ffe9d6951fc076 3065 mysql-5.5_5.5.42-1.dsc
 887b12676be4893fa833e4a585c6c8b0c0f18dee30ba7d22cfe860cd85bfc74a 21795431 mysql-5.5_5.5.42.orig.tar.gz
 288ec8107e183a760c1e7ca62582874f0575f853348fe3f114e70cbcd1aa5db2 231316 mysql-5.5_5.5.42-1.debian.tar.xz
 57161100b16e4744b38dceaf64529f9e5ca2d873d6179e4cc3255b24a76791ef 74152 mysql-common_5.5.42-1_all.deb
 5f94bcbfefd8749ad04ab8a62f1777b41d69f00549061cc214ed86bffb759288 72388 mysql-server_5.5.42-1_all.deb
 e79aa1f4da24dc25973b7955800c86c172b423674144e66561ff7a1870b500b9 72260 mysql-client_5.5.42-1_all.deb
 ae980cadc87fccbaf408c9f867eccdc1ff8ebe19c9847ee3374c23a44c80d04e 72236 mysql-testsuite_5.5.42-1_all.deb
 a688aae4cd4055631645451f6428d5d1a599e46fd37b827ebc8909f72955235a 662744 libmysqlclient18_5.5.42-1_amd64.deb
 47e0005ae1e02857a470852fbba4079590b766d10e0cf7dc61e25e4d99c50562 3257516 libmysqld-pic_5.5.42-1_amd64.deb
 6482b3965ec61248534a809ff3d637fba913dcd3f35018fd9f58772df21b5076 3256742 libmysqld-dev_5.5.42-1_amd64.deb
 52a1fcd95c17f57994ad5900474bcc88cf011003873cda2d2716098872cb9551 942524 libmysqlclient-dev_5.5.42-1_amd64.deb
 f0265f88d5cac68f16f9bf611b3536523201c503a3c116c014c7566a6f47d9e8 1815424 mysql-client-5.5_5.5.42-1_amd64.deb
 1be32933b1de281f0d6595488896d80239900d33d349fae715e9a13a33b8576d 3723500 mysql-server-core-5.5_5.5.42-1_amd64.deb
 8ca31a65aa35a9515356c21d7a7ef646369b47e8060ae5a3c10c4bef96a0de41 2006692 mysql-server-5.5_5.5.42-1_amd64.deb
 e50d88174aa2ae85b4f5da8e3852891d655b6af63210d521a22016a97377268e 4356012 mysql-testsuite-5.5_5.5.42-1_amd64.deb
 cfff65ff416bb2cac3c5edfc8205710b3dbdc8c8b9efaa9a2abb026b1c3f392f 22964178 mysql-source-5.5_5.5.42-1_amd64.deb
Files:
 d80bca298910200c379299e57e1ef9fe 3065 database optional mysql-5.5_5.5.42-1.dsc
 c4d946e6c9f54c386aacb8d3ea957cf8 21795431 database optional mysql-5.5_5.5.42.orig.tar.gz
 58fc0995a4aa182043dc0a613069f2f6 231316 database optional mysql-5.5_5.5.42-1.debian.tar.xz
 04f286aacacabdac99122f2c4d2decde 74152 database optional mysql-common_5.5.42-1_all.deb
 f4182454a8b0440b05bc7d718256efcf 72388 database optional mysql-server_5.5.42-1_all.deb
 f734acb33cdeeb46e2a5e5ddf34b4850 72260 database optional mysql-client_5.5.42-1_all.deb
 370bdc9fac61eb30691ad1df1c983226 72236 database optional mysql-testsuite_5.5.42-1_all.deb
 e288513935845e55c266413c31fbf154 662744 libs optional libmysqlclient18_5.5.42-1_amd64.deb
 a013672f58143b193563eb679fc0e367 3257516 libdevel optional libmysqld-pic_5.5.42-1_amd64.deb
 1d24eada016f548db1e0c6bca79708a8 3256742 libdevel optional libmysqld-dev_5.5.42-1_amd64.deb
 264340bdb1c87af0352fde74f492aa44 942524 libdevel optional libmysqlclient-dev_5.5.42-1_amd64.deb
 1961bbd630ebaee7304cdd57bb216317 1815424 database optional mysql-client-5.5_5.5.42-1_amd64.deb
 c918b7d68c4590495b796b22cb3d1164 3723500 database optional mysql-server-core-5.5_5.5.42-1_amd64.deb
 ed090c6eebd69206b05d4220b885191a 2006692 database optional mysql-server-5.5_5.5.42-1_amd64.deb
 0bba016e2ab236e7c3955540700c0c45 4356012 database optional mysql-testsuite-5.5_5.5.42-1_amd64.deb
 7487068aec618a0bbea8710b71de1e00 22964178 database optional mysql-source-5.5_5.5.42-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=jBT2
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 24 May 2015 08:04:23 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 18:31:36 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.