[SECURITY] Fedora 16 Update: mysql-5.5.20-1.fc16
updates at fedoraproject.org
updates at fedoraproject.org
Wed Feb 8 22:53:23 UTC 2012
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-0972
2012-01-28 02:43:04
--------------------------------------------------------------------------------
Name : mysql
Product : Fedora 16
Version : 5.5.20
Release : 1.fc16
URL : http://www.mysql.com
Summary : MySQL client programs and shared libraries
Description :
MySQL is a multi-user, multi-threaded SQL database server. MySQL is a
client/server implementation consisting of a server daemon (mysqld)
and many different client programs and libraries. The base package
contains the standard MySQL client programs and generic MySQL files.
--------------------------------------------------------------------------------
Update Information:
- Update to MySQL 5.5.20, for various fixes described at
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html
as well as security fixes described at
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
- Re-include the mysqld logrotate script, now that it's not so bogus
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 27 2012 Tom Lane <tgl at redhat.com> 5.5.20-1
- Update to MySQL 5.5.20, for various fixes described at
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html
as well as security fixes described at
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
Resolves: #783828
- Re-include the mysqld logrotate script, now that it's not so bogus
Resolves: #547007
* Wed Jan 4 2012 Tom Lane <tgl at redhat.com> 5.5.19-1
- Update to MySQL 5.5.19, for various fixes described at
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-19.html
* Sun Nov 20 2011 Tom Lane <tgl at redhat.com> 5.5.18-1
- Update to MySQL 5.5.18, for various fixes described at
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-18.html
* Sat Nov 12 2011 Tom Lane <tgl at redhat.com> 5.5.17-1
- Update to MySQL 5.5.17, for various fixes described at
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-17.html
- Get rid of version-number assumption in sysv-to-systemd conversion trigger
* Wed Nov 2 2011 Honza Horak <hhorak at redhat.com> 5.5.16-4
- Don't assume all ethernet devices are named ethX
Resolves: #682365
- Exclude user definition from my.cnf, user is defined in mysqld.service now
Resolves: #661265
* Sun Oct 16 2011 Tom Lane <tgl at redhat.com> 5.5.16-3
- Fix unportable usage associated with va_list arguments
Resolves: #744707
* Sun Oct 16 2011 Tom Lane <tgl at redhat.com> 5.5.16-2
- Update to MySQL 5.5.16, for various fixes described at
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-16.html
* Fri Jul 29 2011 Tom Lane <tgl at redhat.com> 5.5.15-2
- Update to MySQL 5.5.15, for various fixes described at
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-15.html
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #783793 - CVE-2011-2262 mysql: Unspecified vulnerability allows remote attackers to affect availability
https://bugzilla.redhat.com/show_bug.cgi?id=783793
[ 2 ] Bug #783794 - CVE-2012-0075 mysql: Unspecified vulnerability allows remote authenticated users to affect integrity
https://bugzilla.redhat.com/show_bug.cgi?id=783794
[ 3 ] Bug #783799 - CVE-2012-0112 mysql: Unspecified vulnerability allows remote authenticated users to affect availability
https://bugzilla.redhat.com/show_bug.cgi?id=783799
[ 4 ] Bug #783800 - CVE-2012-0113 mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and availability
https://bugzilla.redhat.com/show_bug.cgi?id=783800
[ 5 ] Bug #783801 - CVE-2012-0114 mysql: Unspecified vulnerability allows local users to affect confidentiality and integrity
https://bugzilla.redhat.com/show_bug.cgi?id=783801
[ 6 ] Bug #783802 - CVE-2012-0115 mysql: Unspecified vulnerability allows remote authenticated users to affect availability
https://bugzilla.redhat.com/show_bug.cgi?id=783802
[ 7 ] Bug #783803 - CVE-2012-0116 mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and integrity
https://bugzilla.redhat.com/show_bug.cgi?id=783803
[ 8 ] Bug #783804 - CVE-2012-0117 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors
https://bugzilla.redhat.com/show_bug.cgi?id=783804
[ 9 ] Bug #783805 - CVE-2012-0118 mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and availability
https://bugzilla.redhat.com/show_bug.cgi?id=783805
[ 10 ] Bug #783806 - CVE-2012-0119 mysql: Unspecified vulnerability allows remote authenticated users to affect availability
https://bugzilla.redhat.com/show_bug.cgi?id=783806
[ 11 ] Bug #783807 - CVE-2012-0120 mysql: Unspecified vulnerability allows remote authenticated users to affect availability
https://bugzilla.redhat.com/show_bug.cgi?id=783807
[ 12 ] Bug #783808 - CVE-2012-0484 mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality
https://bugzilla.redhat.com/show_bug.cgi?id=783808
[ 13 ] Bug #783809 - CVE-2012-0485 mysql: Unspecified vulnerability allows remote authenticated users to affect availability
https://bugzilla.redhat.com/show_bug.cgi?id=783809
[ 14 ] Bug #783810 - CVE-2012-0486 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors
https://bugzilla.redhat.com/show_bug.cgi?id=783810
[ 15 ] Bug #783812 - CVE-2012-0487 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors
https://bugzilla.redhat.com/show_bug.cgi?id=783812
[ 16 ] Bug #783813 - CVE-2012-0488 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors
https://bugzilla.redhat.com/show_bug.cgi?id=783813
[ 17 ] Bug #783814 - CVE-2012-0489 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors
https://bugzilla.redhat.com/show_bug.cgi?id=783814
[ 18 ] Bug #783815 - CVE-2012-0490 mysql: Unspecified vulnerability allows remote authenticated users to affect availability
https://bugzilla.redhat.com/show_bug.cgi?id=783815
[ 19 ] Bug #783816 - CVE-2012-0491 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors
https://bugzilla.redhat.com/show_bug.cgi?id=783816
[ 20 ] Bug #783817 - CVE-2012-0492 mysql: Unspecified vulnerability allows remote authenticated users to affect availability
https://bugzilla.redhat.com/show_bug.cgi?id=783817
[ 21 ] Bug #783818 - CVE-2012-0493 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors
https://bugzilla.redhat.com/show_bug.cgi?id=783818
[ 22 ] Bug #783819 - CVE-2012-0494 mysql: Unspecified vulnerability allows local users to affect availability via unknown vectors
https://bugzilla.redhat.com/show_bug.cgi?id=783819
[ 23 ] Bug #783820 - CVE-2012-0495 mysql: Unspecified vulnerability allows remote authenticated users to affect availability via unknown vectors
https://bugzilla.redhat.com/show_bug.cgi?id=783820
[ 24 ] Bug #783821 - CVE-2012-0496 mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and integrity via unknown vectors
https://bugzilla.redhat.com/show_bug.cgi?id=783821
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update mysql' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the package-announce
mailing list