--===============2720974885197899771==
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature";
 boundary="=-iyzmeWv1ZTe/zIxgbGix"


--=-iyzmeWv1ZTe/zIxgbGix
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1397-1
March 12, 2012

mysql-5.1, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 11.10
- Ubuntu 11.04
- Ubuntu 10.10
- Ubuntu 10.04 LTS
- Ubuntu 8.04 LTS

Summary:

Several security issues were fixed in MySQL.

Software Description:
- mysql-5.1: MySQL database
- mysql-dfsg-5.1: MySQL database
- mysql-dfsg-5.0: MySQL database

Details:

Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.

MySQL has been updated to 5.1.61 in Ubuntu 10.04 LTS, Ubuntu 10.10,
Ubuntu 11.04 and Ubuntu 11.10. Ubuntu 8.04 LTS has been updated to
MySQL 5.0.95.

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Please see the following for more information:

http://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-x.html
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  mysql-server-5.1                5.1.61-0ubuntu0.11.10.1

Ubuntu 11.04:
  mysql-server-5.1                5.1.61-0ubuntu0.11.04.1

Ubuntu 10.10:
  mysql-server-5.1                5.1.61-0ubuntu0.10.10.1

Ubuntu 10.04 LTS:
  mysql-server-5.1                5.1.61-0ubuntu0.10.04.1

Ubuntu 8.04 LTS:
  mysql-server-5.0                5.0.95-0ubuntu1

In general, a standard system update will make all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-1397-1
  CVE-2007-5925, CVE-2008-3963, CVE-2008-4098, CVE-2008-4456,
  CVE-2008-7247, CVE-2009-2446, CVE-2009-4019, CVE-2009-4030,
  CVE-2009-4484, CVE-2010-1621, CVE-2010-1626, CVE-2010-1848,
  CVE-2010-1849, CVE-2010-1850, CVE-2010-2008, CVE-2010-3677,
  CVE-2010-3678, CVE-2010-3679, CVE-2010-3680, CVE-2010-3681,
  CVE-2010-3682, CVE-2010-3683, CVE-2010-3833, CVE-2010-3834,
  CVE-2010-3835, CVE-2010-3836, CVE-2010-3837, CVE-2010-3838,
  CVE-2010-3839, CVE-2010-3840, CVE-2011-2262, CVE-2012-0075,
  CVE-2012-0087, CVE-2012-0101, CVE-2012-0102, CVE-2012-0112,
  CVE-2012-0113, CVE-2012-0114, CVE-2012-0115, CVE-2012-0116,

Package Information:
  https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.61-0ubuntu0.11.10.1
  https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.61-0ubuntu0.11.04.1
  https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.61-0ubuntu0.10.10.1
  https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.61-0ubuntu0.10.04.1
  https://launchpad.net/ubuntu/+source/mysql-dfsg-5.0/5.0.95-0ubuntu1



--ÒyzmeWv1ZTe/zIxgbGix
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=3jh9
-----END PGP SIGNATURE-----

--=-iyzmeWv1ZTe/zIxgbGix--



--===============2720974885197899771==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============2720974885197899771==--