mysql-5.5: Multiple security fixes from the April 2015 CPU

Debian Bug report logs - #782645
mysql-5.5: Multiple security fixes from the April 2015 CPU

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: mysql-5.5: Multiple security fixes from the April 2015 CPU

Date: Wed, 15 Apr 2015 17:25:43 +0200

Source: mysql-5.5
Version: 5.5.23-2
Severity: grave
Tags: security upstream fixed-upstream

Hi

As usual for this time of the year: there is a new Oracle Patch update
including updates for MySQL, see:

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixMSQL

Regards,
Salvatore

Message #12 received at 782645@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: 782645@bugs.debian.org

Subject: Re: Bug#782645: mysql-5.5: Multiple security fixes from the April 2015 CPU

Date: Fri, 17 Apr 2015 20:25:20 +0200

Hi MySQL team,

I'm currently building now 5.5.43-0+wheezy1 for wheezy-security, as
well 5.5.43-0+deb8u1 for jessie-security, since effectively in the
quiet period before the jessie release.

Regards,
Salvatore

Message #17 received at 782645-close@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: 782645-close@bugs.debian.org

Subject: Bug#782645: fixed in mysql-5.5 5.5.43-0+deb8u1

Date: Sun, 19 Apr 2015 06:35:38 +0000

Source: mysql-5.5
Source-Version: 5.5.43-0+deb8u1

We believe that the bug you reported is fixed in the latest version of
mysql-5.5, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 782645@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated mysql-5.5 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 18 Apr 2015 06:07:42 +0200
Source: mysql-5.5
Binary: libmysqlclient18 libmysqld-pic libmysqld-dev libmysqlclient-dev mysql-common mysql-client-5.5 mysql-server-core-5.5 mysql-server-5.5 mysql-server mysql-client mysql-testsuite mysql-testsuite-5.5 mysql-source-5.5
Architecture: source all amd64
Version: 5.5.43-0+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libmysqlclient-dev - MySQL database development files
 libmysqlclient18 - MySQL database client library
 libmysqld-dev - MySQL embedded database development files
 libmysqld-pic - PIC version of MySQL embedded server development files
 mysql-client - MySQL database client (metapackage depending on the latest versio
 mysql-client-5.5 - MySQL database client binaries
 mysql-common - MySQL database common files, e.g. /etc/mysql/my.cnf
 mysql-server - MySQL database server (metapackage depending on the latest versio
 mysql-server-5.5 - MySQL database server binaries and system database setup
 mysql-server-core-5.5 - MySQL database server binaries
 mysql-source-5.5 - MySQL source
 mysql-testsuite - MySQL testsuite
 mysql-testsuite-5.5 - MySQL testsuite
Closes: 782645
Changes:
 mysql-5.5 (5.5.43-0+deb8u1) jessie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Imported Upstream version 5.5.43 to fix security issues:
     - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
     - CVE-2015-0499 CVE-2015-0501 CVE-2015-0505 CVE-2015-2571
     (Closes: #782645)
   * Update copyright years for upstream files
Checksums-Sha1:
 33e5fef1fb0e63e9a5705c1eafc709cef06c5d9f 3093 mysql-5.5_5.5.43-0+deb8u1.dsc
 20d86f0b13ab7302a5b973b5eccd9b027e2923c4 232016 mysql-5.5_5.5.43-0+deb8u1.debian.tar.xz
 fcd4dcef32a63e06e12570914515cf86981b1004 74202 mysql-common_5.5.43-0+deb8u1_all.deb
 d6a995a6afee8f31af0c3c9609596338f833065a 72510 mysql-server_5.5.43-0+deb8u1_all.deb
 fe4df5c0a59e681005b457c970e3e187ef99a746 72384 mysql-client_5.5.43-0+deb8u1_all.deb
 06b6a921489142d4da0ce7b8443a425b550adc33 72346 mysql-testsuite_5.5.43-0+deb8u1_all.deb
Checksums-Sha256:
 5bf62777d5c3e6da5d9d13ba17f514a91f9e451c4dd2c02e238536e45c2d8ec9 3093 mysql-5.5_5.5.43-0+deb8u1.dsc
 96911807cbdcd7eeda6b364dd0abd0ddc7b9ef5b47cc2ccd4db7691abaced64e 232016 mysql-5.5_5.5.43-0+deb8u1.debian.tar.xz
 83d8ac88698f1792577ecf82f2a0880a120e1967bae244be7baaf1c056306dbb 74202 mysql-common_5.5.43-0+deb8u1_all.deb
 2ce895f3f6a12bd32d5d5a4f2fb44b7f383214128ff3e5d13226e6efd72bcc57 72510 mysql-server_5.5.43-0+deb8u1_all.deb
 fe3bf2276cf6729a6561a0f392bae960b1533b32bd5297e013c8b50e756ec743 72384 mysql-client_5.5.43-0+deb8u1_all.deb
 a681d6bcd7393f88ea38512b94d1bb45e7e42aff61d9de055bb47104f099d017 72346 mysql-testsuite_5.5.43-0+deb8u1_all.deb
Files:
 e0c055160a0921104abfd0d35b4189fd 3093 database optional mysql-5.5_5.5.43-0+deb8u1.dsc
 025e1592a176dcd66e356cb673dc2522 232016 database optional mysql-5.5_5.5.43-0+deb8u1.debian.tar.xz
 d247dfa4b689c926615b361f6b5cee6c 74202 database optional mysql-common_5.5.43-0+deb8u1_all.deb
 2f2f3346e89092d92924488ef04226df 72510 database optional mysql-server_5.5.43-0+deb8u1_all.deb
 9ba21b190e8fd11d660cab71175ade9e 72384 database optional mysql-client_5.5.43-0+deb8u1_all.deb
 d2ab53bc4636dd4d0ba8095dd34f582c 72346 database optional mysql-testsuite_5.5.43-0+deb8u1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=8EjL
-----END PGP SIGNATURE-----

Message #22 received at 782645@bugs.debian.org (full text, mbox, reply):

From: Josef Moosbauer <josef@moosbauer.net>

To: 782645@bugs.debian.org

Subject: and this broke my mariadb completely

Date: Sun, 19 Apr 2015 22:33:51 +0200

[Message part 1 (text/plain, inline)]

Dear Maintainer

nice job indeed

-- 
kind regards / mit freundlichen Grüßen
Moosbauer Josef
<josef@moosbauer.net>
GPG Fingerprint 6748 9413 0EF1 5B23 D707  DBFA 570B 00E3 4689 8CC9
"Of course I'm crazy, but that doesn't mean I'm wrong. I'm mad but not
ill"

[signature.asc (application/pgp-signature, inline)]

Message #27 received at 782645@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Josef Moosbauer <josef@moosbauer.net>, 782645@bugs.debian.org

Subject: Re: Bug#782645: and this broke my mariadb completely

Date: Mon, 20 Apr 2015 07:10:04 +0200

Hi Josef,

On Sun, Apr 19, 2015 at 10:33:51PM +0200, Josef Moosbauer wrote:
> Dear Maintainer
> 
> nice job indeed

Can you give more information? (e.g. Update log, previous state,
sources.list status, ...). mysql-server and mariadb-server are not
coinstallable.

Regards,
Salvatore

Message #32 received at 782645@bugs.debian.org (full text, mbox, reply):

From: Josef Moosbauer <josef@mail.moosbauer.net>

To: 782645@bugs.debian.org

Subject: Re: Bug#782645: and this broke my mariadb completely

Date: Mon, 20 Apr 2015 20:44:23 +0200

[Message part 1 (text/plain, inline)]

Hello Salavatore,

Sorry - it was late in the evening for me:

So 1st of all - Thank god I had a backup:-)

I had this problem in the past, but somehow it stopped at least half a year ago. I normally run (at least once a week) sudo apt-get update; sudo apt-get -y dist-upgrade
and here is the term.log from yesterday evening:
Log started: 2015-04-19  22:09:58
(Reading database ... 519911 files and directories currently installed.)
Removing mariadb-server-5.5 (5.5.42+maria-1~wheezy) ...
Removing mariadb-server-core-5.5 (5.5.42+maria-1~wheezy) ...
Removing mariadb-client-5.5 (5.5.42+maria-1~wheezy) ...
Removing mariadb-client-core-5.5 (5.5.42+maria-1~wheezy) ...
Removing libmariadbclient18 (5.5.42+maria-1~wheezy) ...
Processing triggers for man-db (2.7.0.2-5) ...
Processing triggers for menu (2.1.47) ...
Processing triggers for libc-bin (2.19-18) ...
(Reading database ... 519695 files and directories currently installed.)
Preparing to unpack .../mysql-common_5.5.43-0+deb8u1_all.deb ...
Unpacking mysql-common (5.5.43-0+deb8u1) over (5.5.42+maria-1~wheezy) ...
Preparing to unpack .../libmysqlclient18_5.5.43-0+deb8u1_amd64.deb ...
Unpacking libmysqlclient18:amd64 (5.5.43-0+deb8u1) over (5.5.42+maria-1~wheezy) ...
Preparing to unpack .../libbrlapi0.6_5.2~20141018-5_amd64.deb ...
Unpacking libbrlapi0.6:amd64 (5.2~20141018-5) over (5.2~20141018-4) ...
Preparing to unpack .../python-brlapi_5.2~20141018-5_amd64.deb ...
Unpacking python-brlapi (5.2~20141018-5) over (5.2~20141018-4) ...
Preparing to unpack .../python3-brlapi_5.2~20141018-5_amd64.deb ...
Unpacking python3-brlapi (5.2~20141018-5) over (5.2~20141018-4) ...
Preparing to unpack .../xbrlapi_5.2~20141018-5_amd64.deb ...
Unpacking xbrlapi (5.2~20141018-5) over (5.2~20141018-4) ...
Processing triggers for man-db (2.7.0.2-5) ...
Setting up mysql-common (5.5.43-0+deb8u1) ...
Installing new version of config file /etc/mysql/my.cnf ...
Setting up libmysqlclient18:amd64 (5.5.43-0+deb8u1) ...
Setting up libbrlapi0.6:amd64 (5.2~20141018-5) ...
Setting up python-brlapi (5.2~20141018-5) ...
Setting up python3-brlapi (5.2~20141018-5) ...
Setting up xbrlapi (5.2~20141018-5) ...
Processing triggers for libc-bin (2.19-18) ...
Log ended: 2015-04-19  22:10:57

so I went apt-get remove sudo apt-get remove libmysqlclient18; 
sudo apt-get install   libmysqlclient18=5.5.42+maria-1~wheezy   mariadb-client-5.5=5.5.42+maria-1~wheezy   mariadb-client-core-5.5=5.5.42+maria-1~wheezy;
sudo apt-get install libmariadbclient18 mariadb-client-5.5 mariadb-client-core-5.5 mariadb-server-5.5 mariadb-server-core-5.5;
systemctl start mysql;

Somehow along the way I am not able to reconstruct I also lost libdbd-mysql. after reinstalling it works again,
although running sudo apt-get dist-upgrade (without the -y) still wants to get rid of mariadb.

sources list:
# 

# deb cdrom:[Debian GNU/Linux 6.0.2.1 _Squeeze_ - Official i386 NETINST Binary-1 20110628-13:01]/ squeeze main

# deb cdrom:[Debian GNU/Linux 6.0.2.1 _Squeeze_ - Official i386 NETINST Binary-1 20110628-13:01]/ squeeze main

# deb [arch=amd64,i386] http://ftp.at.debian.org/debian/ squeeze main contrib non-free

deb [arch=amd64,i386] http://ftp.at.debian.org/debian/ testing main contrib non-free
deb-src [arch=amd64,i386] http://ftp.at.debian.org/debian/ testing main contrib non-free
deb [arch=amd64,i386] http://ftp.at.debian.org/debian/ testing-updates main contrib non-free
deb-src [arch=amd64,i386] http://ftp.at.debian.org/debian/ testing-updates main contrib non-free

deb [arch=amd64,i386] http://security.debian.org/ testing/updates main contrib non-free
deb-src [arch=amd64,i386] http://security.debian.org/ testing/updates main contrib non-free

#deb [arch=amd64,i386] http://www.deb-multimedia.org testing main non-free

deb http://download.virtualbox.org/virtualbox/debian wheezy contrib

deb http://tweedo.com/mirror/mariadb/repo/5.5/debian wheezy main
#deb http://ppa.launchpad.net/mozillateam/firefox-next/ubuntu lucid main
#deb http://www.emdebian.org/debian/ unstable main

deb http://deb.torproject.org/torproject.org jessie main
deb-src http://deb.torproject.org/torproject.org jessie main

and preferences
#Moving to testing as our main release
Package: *
Pin: release a=testing
Pin-Priority: 990

# But packages for MariaDB take priority
Package: *
Pin: Origin   http://tweedo.com/
Pin-Priority: 1000


sorry again for yesterday

kind regards
Josef

On Mon, 20 Apr 2015 07:10:04 +0200 Salvatore Bonaccorso <carnil@debian.org> wrote:
> Hi Josef,
> 
> On Sun, Apr 19, 2015 at 10:33:51PM +0200, Josef Moosbauer wrote:
> > Dear Maintainer
> > 
> > nice job indeed
> 
> Can you give more information? (e.g. Update log, previous state,
> sources.list status, ...). mysql-server and mariadb-server are not
> coinstallable.
> 
> Regards,
> Salvatore
> 
> 

[signature.asc (application/pgp-signature, inline)]

Message #37 received at 782645@bugs.debian.org (full text, mbox, reply):

From: Josef Moosbauer <moosbaue@gmail.com>

To: 782645@bugs.debian.org

Subject: Re: Bug#782645: and this broke my mariadb completely

Date: Mon, 20 Apr 2015 21:20:56 +0200

[Message part 1 (text/plain, inline)]

Hello again,

I just holded the upgrade for mariadb followin https://mariadb.com/kb/en/mariadb/installing-mariadb-deb-files/

.. and now I can dist-upgrade -y again

kind regards
Josef

On Mon, 20 Apr 2015 20:44:23 +0200 Josef Moosbauer <josef@mail.moosbauer.net> wrote:
> Hello Salavatore,
> 
> Sorry - it was late in the evening for me:
> 
> So 1st of all - Thank god I had a backup:-)
> 
> I had this problem in the past, but somehow it stopped at least half a year ago. I normally run (at least once a week) sudo apt-get update; sudo apt-get -y dist-upgrade
> and here is the term.log from yesterday evening:
> Log started: 2015-04-19  22:09:58
> (Reading database ... 519911 files and directories currently installed.)
> Removing mariadb-server-5.5 (5.5.42+maria-1~wheezy) ...
> Removing mariadb-server-core-5.5 (5.5.42+maria-1~wheezy) ...
> Removing mariadb-client-5.5 (5.5.42+maria-1~wheezy) ...
> Removing mariadb-client-core-5.5 (5.5.42+maria-1~wheezy) ...
> Removing libmariadbclient18 (5.5.42+maria-1~wheezy) ...
> Processing triggers for man-db (2.7.0.2-5) ...
> Processing triggers for menu (2.1.47) ...
> Processing triggers for libc-bin (2.19-18) ...
> (Reading database ... 519695 files and directories currently installed.)
> Preparing to unpack .../mysql-common_5.5.43-0+deb8u1_all.deb ...
> Unpacking mysql-common (5.5.43-0+deb8u1) over (5.5.42+maria-1~wheezy) ...
> Preparing to unpack .../libmysqlclient18_5.5.43-0+deb8u1_amd64.deb ...
> Unpacking libmysqlclient18:amd64 (5.5.43-0+deb8u1) over (5.5.42+maria-1~wheezy) ...
> Preparing to unpack .../libbrlapi0.6_5.2~20141018-5_amd64.deb ...
> Unpacking libbrlapi0.6:amd64 (5.2~20141018-5) over (5.2~20141018-4) ...
> Preparing to unpack .../python-brlapi_5.2~20141018-5_amd64.deb ...
> Unpacking python-brlapi (5.2~20141018-5) over (5.2~20141018-4) ...
> Preparing to unpack .../python3-brlapi_5.2~20141018-5_amd64.deb ...
> Unpacking python3-brlapi (5.2~20141018-5) over (5.2~20141018-4) ...
> Preparing to unpack .../xbrlapi_5.2~20141018-5_amd64.deb ...
> Unpacking xbrlapi (5.2~20141018-5) over (5.2~20141018-4) ...
> Processing triggers for man-db (2.7.0.2-5) ...
> Setting up mysql-common (5.5.43-0+deb8u1) ...
> Installing new version of config file /etc/mysql/my.cnf ...
> Setting up libmysqlclient18:amd64 (5.5.43-0+deb8u1) ...
> Setting up libbrlapi0.6:amd64 (5.2~20141018-5) ...
> Setting up python-brlapi (5.2~20141018-5) ...
> Setting up python3-brlapi (5.2~20141018-5) ...
> Setting up xbrlapi (5.2~20141018-5) ...
> Processing triggers for libc-bin (2.19-18) ...
> Log ended: 2015-04-19  22:10:57
> 
> so I went apt-get remove sudo apt-get remove libmysqlclient18; 
> sudo apt-get install   libmysqlclient18=5.5.42+maria-1~wheezy   mariadb-client-5.5=5.5.42+maria-1~wheezy   mariadb-client-core-5.5=5.5.42+maria-1~wheezy;
> sudo apt-get install libmariadbclient18 mariadb-client-5.5 mariadb-client-core-5.5 mariadb-server-5.5 mariadb-server-core-5.5;
> systemctl start mysql;
> 
> Somehow along the way I am not able to reconstruct I also lost libdbd-mysql. after reinstalling it works again,
> although running sudo apt-get dist-upgrade (without the -y) still wants to get rid of mariadb.
> 
> sources list:
> # 
> 
> # deb cdrom:[Debian GNU/Linux 6.0.2.1 _Squeeze_ - Official i386 NETINST Binary-1 20110628-13:01]/ squeeze main
> 
> # deb cdrom:[Debian GNU/Linux 6.0.2.1 _Squeeze_ - Official i386 NETINST Binary-1 20110628-13:01]/ squeeze main
> 
> # deb [arch=amd64,i386] http://ftp.at.debian.org/debian/ squeeze main contrib non-free
> 
> deb [arch=amd64,i386] http://ftp.at.debian.org/debian/ testing main contrib non-free

-- 
kind regards / mit freundlichen Grüßen
Moosbauer Josef
<josef@moosbauer.net>
GPG Fingerprint 6748 9413 0EF1 5B23 D707  DBFA 570B 00E3 4689 8CC9
"Of course I'm crazy, but that doesn't mean I'm wrong. I'm mad but not
ill"

[signature.asc (application/pgp-signature, inline)]

Message #42 received at 782645@bugs.debian.org (full text, mbox, reply):

From: Otto Kekäläinen <otto@seravo.fi>

To: Josef Moosbauer <josef@mail.moosbauer.net>, 782645@bugs.debian.org

Cc: Salvatore Bonaccorso <carnil@debian.org>

Subject: Re: [debian-mysql] Bug#782645: and this broke my mariadb completely

Date: Tue, 21 Apr 2015 08:48:00 +0300

Hello Josef!

2015-04-20 21:44 GMT+03:00 Josef Moosbauer <josef@mail.moosbauer.net>:
> # But packages for MariaDB take priority
> Package: *
> Pin: Origin   http://tweedo.com/
> Pin-Priority: 1000

Looking at your sources listing I can see that you are mixing
repositories for both wheezy and jessie, and also have ubuntu repos
enabled and 3rd party repos. Debian maintainers have no way of
anticipating what can happen in these kind of mixed environments.

I'd recommend you only enable Jessie repositories and install and
upgrade everything from there. From Jessie you can install official
MariaDB 10.0 packages and then stop using the old 3rd party MariaDB
repos.

Message #47 received at 782645@bugs.debian.org (full text, mbox, reply):

From: Josef Moosbauer <moosbaue@gmail.com>

To: 782645@bugs.debian.org

Subject: Re: [debian-mysql] Bug#782645: and this broke my mariadb completely

Date: Tue, 21 Apr 2015 21:45:49 +0200

[Message part 1 (text/plain, inline)]

Hello Otto,

understood and thank you
followed your suggestions and works

kind regards and thank you
Josef

On Tue, 21 Apr 2015 08:48:00 +0300 =?UTF-8?B?T3R0byBLZWvDpGzDpGluZW4=?= <otto@seravo.fi> wrote:
> Hello Josef!
> 
> 2015-04-20 21:44 GMT+03:00 Josef Moosbauer <josef@mail.moosbauer.net>:
> > # But packages for MariaDB take priority
> > Package: *
> > Pin: Origin   http://tweedo.com/
> > Pin-Priority: 1000
> 
> Looking at your sources listing I can see that you are mixing
> repositories for both wheezy and jessie, and also have ubuntu repos
> enabled and 3rd party repos. Debian maintainers have no way of
> anticipating what can happen in these kind of mixed environments.
> 
> I'd recommend you only enable Jessie repositories and install and
> upgrade everything from there. From Jessie you can install official
> MariaDB 10.0 packages and then stop using the old 3rd party MariaDB
> repos.
> 
> 

-- 
kind regards / mit freundlichen Grüßen
Moosbauer Josef
<josef@moosbauer.net>
GPG Fingerprint 6748 9413 0EF1 5B23 D707  DBFA 570B 00E3 4689 8CC9
"Of course I'm crazy, but that doesn't mean I'm wrong. I'm mad but not
ill"

[signature.asc (application/pgp-signature, inline)]

Message #52 received at 782645-close@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: 782645-close@bugs.debian.org

Subject: Bug#782645: fixed in mysql-5.5 5.5.43-0+deb7u1

Date: Wed, 22 Apr 2015 05:02:10 +0000

Source: mysql-5.5
Source-Version: 5.5.43-0+deb7u1

We believe that the bug you reported is fixed in the latest version of
mysql-5.5, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 782645@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated mysql-5.5 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 17 Apr 2015 20:14:17 +0200
Source: mysql-5.5
Binary: libmysqlclient18 libmysqld-pic libmysqld-dev libmysqlclient-dev mysql-common mysql-client-5.5 mysql-server-core-5.5 mysql-server-5.5 mysql-server mysql-client mysql-testsuite-5.5 mysql-source-5.5
Architecture: source all amd64
Version: 5.5.43-0+deb7u1
Distribution: wheezy-security
Urgency: high
Maintainer: Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description: 
 libmysqlclient-dev - MySQL database development files
 libmysqlclient18 - MySQL database client library
 libmysqld-dev - MySQL embedded database development files
 libmysqld-pic - PIC version of MySQL embedded server development files
 mysql-client - MySQL database client (metapackage depending on the latest versio
 mysql-client-5.5 - MySQL database client binaries
 mysql-common - MySQL database common files, e.g. /etc/mysql/my.cnf
 mysql-server - MySQL database server (metapackage depending on the latest versio
 mysql-server-5.5 - MySQL database server binaries and system database setup
 mysql-server-core-5.5 - MySQL database server binaries
 mysql-source-5.5 - MySQL source
 mysql-testsuite-5.5 - MySQL testsuite
Closes: 782645
Changes: 
 mysql-5.5 (5.5.43-0+deb7u1) wheezy-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Imported Upstream version 5.5.43 to fix security issues:
     - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
     - CVE-2015-0433 CVE-2015-0441 CVE-2015-0499 CVE-2015-0501 CVE-2015-0505
       CVE-2015-2568 CVE-2015-2571 CVE-2015-2573
     (Closes: #782645)
   * Update copyright years for upstream files
Checksums-Sha1: 
 98f044e13c2972520ac7eb371c9c1df6006b5b51 2934 mysql-5.5_5.5.43-0+deb7u1.dsc
 ac986973e921d669d3bd5e14d8f35110eb7a3428 21784417 mysql-5.5_5.5.43.orig.tar.gz
 c2f49f5d8cb5dd1eb470d3e5c3fed030c3217a65 375791 mysql-5.5_5.5.43-0+deb7u1.debian.tar.gz
 9c7a8faac80c5a896bab792fd0b81d4f63b83eff 73368 mysql-common_5.5.43-0+deb7u1_all.deb
 452e237a8df4daea7d889fcebe8941efff656c99 71690 mysql-server_5.5.43-0+deb7u1_all.deb
 aae091f46bb1c5276e0eb92def49345902e253ff 71574 mysql-client_5.5.43-0+deb7u1_all.deb
 e401560ed77e1d22129f680a203570c781d678da 676792 libmysqlclient18_5.5.43-0+deb7u1_amd64.deb
 8ea9d72a968ef706cc8c3f7e9806296d77286152 3170762 libmysqld-pic_5.5.43-0+deb7u1_amd64.deb
 e6d16622e5e0e5cb513dbefc9d01364595f55f9f 3168508 libmysqld-dev_5.5.43-0+deb7u1_amd64.deb
 ba886dcb6632d5b3625c22780039c41c3303efa1 943440 libmysqlclient-dev_5.5.43-0+deb7u1_amd64.deb
 6d295e8870e71b89a7583c16d2811d5f6abf53e6 1886050 mysql-client-5.5_5.5.43-0+deb7u1_amd64.deb
 c2991386b74181aa28be3a705ddad9ba629fd37e 3393524 mysql-server-core-5.5_5.5.43-0+deb7u1_amd64.deb
 15c22d24e440f7e82d29890bb4438dad4d515b89 2091376 mysql-server-5.5_5.5.43-0+deb7u1_amd64.deb
 910f7adcc752a7db56eba63e6d541b9e4929b2fa 4407874 mysql-testsuite-5.5_5.5.43-0+deb7u1_amd64.deb
 bb877669ef07ce97094af47cb873f066000f77c7 22926094 mysql-source-5.5_5.5.43-0+deb7u1_amd64.deb
Checksums-Sha256: 
 3c9059cc02f725073a37c166548fde5f2a22e17fcdeb5aa3053209336b1c6f64 2934 mysql-5.5_5.5.43-0+deb7u1.dsc
 43d3df79e5c839a2749deb6e056a4589e49c903e09034c18653ec56e6e4774cd 21784417 mysql-5.5_5.5.43.orig.tar.gz
 64e13a40b0eee3b0c8c633139001984960db343c7dc2ca0a4855ebc02c776752 375791 mysql-5.5_5.5.43-0+deb7u1.debian.tar.gz
 a2aabb2e8e09f847230d85222b32579955810c65952544ff294ac931b8c80ed7 73368 mysql-common_5.5.43-0+deb7u1_all.deb
 2046f7e8661fa89196e3faf15af8ea55db2f0bf37acc3694d3ee9bc7d35528f2 71690 mysql-server_5.5.43-0+deb7u1_all.deb
 b427030e0afa61caf5671935b3b424ce07ef3cf8c6a9c2c817522ace47708f9b 71574 mysql-client_5.5.43-0+deb7u1_all.deb
 79513f06c0660262b7d37aff8c52c8412a8a5702e716188d9d6f3fbe9324db3d 676792 libmysqlclient18_5.5.43-0+deb7u1_amd64.deb
 5abf55afcde086f1948be51ff45ddedc10a8457c15c105b7525fecee35b4f15f 3170762 libmysqld-pic_5.5.43-0+deb7u1_amd64.deb
 153ca6d0b23e4838f01a989961298ebd4c34073e3b6a754d2ae06a22c64142a4 3168508 libmysqld-dev_5.5.43-0+deb7u1_amd64.deb
 780ff0f6284ec81eed442752725d8171a892e4db99a84ecd54bbdf1940d5075f 943440 libmysqlclient-dev_5.5.43-0+deb7u1_amd64.deb
 20164289d67da15a45d2988668bc87f63695ffea67c7b401f82c90d6f4a24870 1886050 mysql-client-5.5_5.5.43-0+deb7u1_amd64.deb
 a161b8724889b4d7e1ff62b893b80881d180c2313f8ced592e518c09ba20dc9f 3393524 mysql-server-core-5.5_5.5.43-0+deb7u1_amd64.deb
 6aefd893030fc70b4f16d2a3e8c1c9fd9666e138140aa542846a622e5e5585aa 2091376 mysql-server-5.5_5.5.43-0+deb7u1_amd64.deb
 0f6e0420238f18b09d6bcbabff0451442dd1b92b0af68dfc2f810b54d3e53fb7 4407874 mysql-testsuite-5.5_5.5.43-0+deb7u1_amd64.deb
 c669b257f2356030d436c58ad80035a93495866568f41d337e85736d2889b8f2 22926094 mysql-source-5.5_5.5.43-0+deb7u1_amd64.deb
Files: 
 347b2b598dd9aba7ee19a6cbd739d817 2934 database optional mysql-5.5_5.5.43-0+deb7u1.dsc
 d77cc87df51af3f79b005d90e26879c1 21784417 database optional mysql-5.5_5.5.43.orig.tar.gz
 b9d0a4994e6bd7f42d0bd1b3411b98e3 375791 database optional mysql-5.5_5.5.43-0+deb7u1.debian.tar.gz
 d71e4a6d60f297e5024e2a7ba32a241a 73368 database optional mysql-common_5.5.43-0+deb7u1_all.deb
 040a85c7d9f5f5e82bc237fd0241520b 71690 database optional mysql-server_5.5.43-0+deb7u1_all.deb
 01f6944d104c2002542af4eb50fad86d 71574 database optional mysql-client_5.5.43-0+deb7u1_all.deb
 d6dfc1d5e82af58b8aebe595c80fdfce 676792 libs optional libmysqlclient18_5.5.43-0+deb7u1_amd64.deb
 5bef9b27e215e879858a2c7908cf88f9 3170762 libdevel optional libmysqld-pic_5.5.43-0+deb7u1_amd64.deb
 2e1bb3db2133012a268e474730452e5f 3168508 libdevel optional libmysqld-dev_5.5.43-0+deb7u1_amd64.deb
 8e0e6ff214735b0267f2b7d8d9654bac 943440 libdevel optional libmysqlclient-dev_5.5.43-0+deb7u1_amd64.deb
 9b58300aec8ee7e3a837417138f75baf 1886050 database optional mysql-client-5.5_5.5.43-0+deb7u1_amd64.deb
 f2f4e82caac46a3389e70624c12f377a 3393524 database optional mysql-server-core-5.5_5.5.43-0+deb7u1_amd64.deb
 631f3fc260902646ced2593755ebde06 2091376 database optional mysql-server-5.5_5.5.43-0+deb7u1_amd64.deb
 d792cb09ac89ab85c9e850acabf70e1b 4407874 database optional mysql-testsuite-5.5_5.5.43-0+deb7u1_amd64.deb
 d16deb344c60e90ff895e7ef63a3afb5 22926094 database optional mysql-source-5.5_5.5.43-0+deb7u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJVMdCSAAoJEAVMuPMTQ89EFr4P/3QZS20rzblZUZ19i+H4PtiM
lrWsBj7bsOexUhQ9NnBuDt5Z6a3PJn9N+2LVNkvbruTTJc5thwUvxNkllqh5ESZU
BRshkV6ns9uYiUrK2UgT36V0XvjcATAltTtemPCgfXu2TjD+MFvj6dAaGux6Vg/Q
fFBWTcmvAHDCJ1B0l3Fj3+YFVsMuvg7R3vj7spZXqMc9CDR/E3EJDwQd5IyjOv0R
ESVNr4oUKDqnFJHhdpXAdEWOP7Kt8fpZQBA+Y/aM1LNCES7rFsYmJ9YKTmDmqPhj
fogDSHhW/hVG9K/UYvqDWnZbaZMonmXwuo+qZgNisP7vglJUWwtQrp0nrGqTacCj
U/sp3nwStVSs0BCQRhILtxfI9qbE8i0n5O5TU98Bz2G6KtDTKSIr7xCGmnoiR5Vk
tqOg034CIJXRM7hwty8eRG5ND1zFHoLrw2XrsmSKSxCKoosnVvyzgG1948zY1YI/
mvYCGNMOrCGNyRRRS0RtXj8yG/PM6kauMYRuRy1qFVBW6cSltN1MQPw6BQqLbpeX
YCWCBOk30yPGl/BRvjKXfbGLWOZn8kvB8oDrcx0w+eyi+vVEhZ7mKtGwIoN2D3Ed
d7Sh4+99yxKs1aYH/N1Q/qq1diRa54Gx5PVVvfVU8tIlyn63tK+4jtrY4PG9GQ/c
GaGVSIsc4Q/TsZgEhzZ/
=iiR+
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.