lp:ubuntu/lucid-security/mysql-dfsg-5.1

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

44. By Marc Deslauriers on 2014-01-16

* SECURITY UPDATE: Update to 5.1.73 to fix security issues (LP: #1269993)
  - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
  - CVE-2013-5908
  - CVE-2014-0386
  - CVE-2014-0393
  - CVE-2014-0401
  - CVE-2014-0402
  - CVE-2014-0412
  - CVE-2014-0437
* debian/patches/33_scripts__mysql_create_system_tables__no_test.dpatch:
  refreshed patch.

43. By Marc Deslauriers on 2013-10-22

* SECURITY UPDATE: Update to 5.1.72 to fix security issues (LP: #1243253)
  - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
  - CVE-2013-3839

42. By Marc Deslauriers on 2013-07-22

* SECURITY UPDATE: Update to 5.1.70 to fix security issues (LP: #1203828)
  - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
  - CVE-2013-1861
  - CVE-2013-3802
  - CVE-2013-3804
* SECURITY UPDATE: insecure creation of debian.cnf file
  - debian/mysql-server-5.1.postinst: set umask to 066 before creating
    debian.cnf.
  - CVE-2013-2162

41. By Seth Arnold on 2013-04-18

* SECURITY UPDATE: Update to 5.1.69 to fix security issues (LP: #1170516)
  - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html

40. By Marc Deslauriers on 2013-01-16

* SECURITY UPDATE: Update to 5.1.67 to fix security issues (LP: #1100264)
  - http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
* debian/patches/99_CVE-2012-5611.dpatch: removed, included upstream.

39. By Marc Deslauriers on 2012-12-07

* SECURITY UPDATE: arbitrary code execution via long argument
  - debian/patches/99_CVE-2012-5611.patch: don't overflow buffer in
    sql/sql_acl.cc, add tests to mysql-test/t/information_schema.test,
    mysql-test/r/information_schema.result.
  - CVE-2012-5611

38. By Marc Deslauriers on 2012-10-19

* SECURITY UPDATE: Update to 5.1.66 to fix security issues (LP: #1068158)
  - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
* debian/mysql-server-5.1.postrm: do not delete local files if main
  conffile still exists since it probably means it is owned by a
  new/different package. (LP: #986892)

37. By Marc Deslauriers on 2012-03-27

* SECURITY UPDATE: Update to 5.1.62 to fix security issues (LP: #965523)
  - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-62.html

36. By Marc Deslauriers on 2012-02-22

* SECURITY UPDATE: Update to 5.1.61 to fix multiple security issues
  (LP: #937869)
  - http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  - CVE-2011-2262
  - CVE-2012-0075
  - CVE-2012-0112
  - CVE-2012-0113
  - CVE-2012-0114
  - CVE-2012-0115
  - CVE-2012-0116
  - CVE-2012-0117
  - CVE-2012-0118
  - CVE-2012-0119
  - CVE-2012-0120
  - CVE-2012-0484
  - CVE-2012-0485
  - CVE-2012-0486
  - CVE-2012-0487
  - CVE-2012-0488
  - CVE-2012-0489
  - CVE-2012-0490
  - CVE-2012-0491
  - CVE-2012-0492
  - CVE-2012-0493
  - CVE-2012-0494
  - CVE-2012-0495
  - CVE-2012-0496
* Dropped patches unnecessary with 5.1.61:
  - debian/patches/90_mysql_safer_strmov.dpatch
  - debian/patches/51_ssl_test_certs.dpatch
  - debian/patches/52_CVE-2009-4030.dpatch
  - debian/patches/53_CVE-2009-4484.dpatch
  - debian/patches/54_CVE-2008-7247.dpatch
  - debian/patches/55_CVE-2010-1621.dpatch
  - debian/patches/56_CVE-2010-1850.dpatch
  - debian/patches/57_CVE-2010-1849.dpatch
  - debian/patches/58_CVE-2010-1848.dpatch
  - debian/patches/59_CVE-2010-1626.dpatch
  - debian/patches/60_CVE-2010-2008.dpatch
  - debian/patches/60_CVE-2010-3677.dpatch
  - debian/patches/60_CVE-2010-3678.dpatch
  - debian/patches/60_CVE-2010-3679.dpatch
  - debian/patches/60_CVE-2010-3680.dpatch
  - debian/patches/60_CVE-2010-3681.dpatch
  - debian/patches/60_CVE-2010-3682.dpatch
  - debian/patches/60_CVE-2010-3683.dpatch
  - debian/patches/60_CVE-2010-3833.dpatch
  - debian/patches/60_CVE-2010-3834.dpatch
  - debian/patches/60_CVE-2010-3835.dpatch
  - debian/patches/60_CVE-2010-3836.dpatch
  - debian/patches/60_CVE-2010-3837.dpatch
  - debian/patches/60_CVE-2010-3838.dpatch
  - debian/patches/60_CVE-2010-3839.dpatch
  - debian/patches/60_CVE-2010-3840.dpatch
  - debian/patches/61_disable_longfilename_test.dpatch
  - debian/patches/62_alter_table_fix.dpatch
  - debian/patches/63_cherrypick-upstream-49479.dpatch
  - debian/patches/10_readline_build_fix.dpatch
* debian/mysql-client-5.1.docs: removed EXCEPTIONS-CLIENT file
* debian/mysql-server-5.1.docs,debian/libmysqlclient16.docs,
  debian/libmysqlclient-dev.docs: removed, no longer necessary.

35. By Clint Byrum on 2010-11-22

debian/patches/63_cherrypick-upstream-49479.dpatch: fixes LOAD DATA
INFILE when used in replication. (LP: #576949)