This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============6781989586798922982==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="bavk7p72k60WsXV7u6QWi4RA2jJR31b9u"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--bavk7p72k60WsXV7u6QWi4RA2jJR31b9u
Content-Type: text/plain; charset=utf-
Content-Transfer-Encoding: quoted-printable
==========================================================================
Ubuntu Security Notice USN-2881-1
January 26, 2016
mysql-5.5, mysql-5.6 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 15.10
- Ubuntu 15.04
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in MySQL.
Software Description:
- mysql-5.6: MySQL database
- mysql-5.5: MySQL database
Details:
Multiple security issues were discovered in MySQL and this update includes
new upstream MySQL versions to fix these issues.
MySQL has been updated to 5.5.47 in Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.
Ubuntu 15.04 and Ubuntu 15.10 have been updated to MySQL 5.6.28.
In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.
Please see the following for more information:
http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-47.html
http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 15.10:
mysql-server-5.6 5.6.28-0ubuntu0.15.10.1
Ubuntu 15.04:
mysql-server-5.6 5.6.28-0ubuntu0.15.04.1
Ubuntu 14.04 LTS:
mysql-server-5.5 5.5.47-0ubuntu0.14.04.1
Ubuntu 12.04 LTS:
mysql-server-5.5 5.5.47-0ubuntu0.12.04.1
In general, a standard system update will make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-2881-1
CVE-2016-0503, CVE-2016-0504, CVE-2016-0505, CVE-2016-0546,
CVE-2016-0595, CVE-2016-0596, CVE-2016-0597, CVE-2016-0598,
CVE-2016-0600, CVE-2016-0606, CVE-2016-0607, CVE-2016-0608,
CVE-2016-0609, CVE-2016-0610, CVE-2016-0611, CVE-2016-0616
Package Information:
https://launchpad.net/ubuntu/+source/mysql-5.6/5.6.28-0ubuntu0.15.10.1
https://launchpad.net/ubuntu/+source/mysql-5.6/5.6.28-0ubuntu0.15.04.1
https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.47-0ubuntu0.14.04.1
https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.47-0ubuntu0.12.04.1
--bavk7p72k60WsXV7u6QWi4RA2jJR31b9u
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=zLOK
-----END PGP SIGNATURE-----
--bavk7p72k60WsXV7u6QWi4RA2jJR31b9u--
--===============6781989586798922982==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============6781989586798922982==--
|
