Accepted mysql-5.5 5.5.33+dfsg-0+wheezy1 (source all amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 14 Dec 2013 22:29:18 +0100
Source: mysql-5.5
Binary: libmysqlclient18 libmysqld-pic libmysqld-dev libmysqlclient-dev mysql-common mysql-client-5.5 mysql-server-core-5.5 mysql-server-5.5 mysql-server mysql-client mysql-testsuite-5.5 mysql-source-5.5
Architecture: source all amd64
Version: 5.5.33+dfsg-0+wheezy1
Distribution: wheezy-security
Urgency: high
Maintainer: Debian MySQL Maintainers <pkg-mysql-maint@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
libmysqlclient-dev - MySQL database development files
libmysqlclient18 - MySQL database client library
libmysqld-dev - MySQL embedded database development files
libmysqld-pic - PIC version of MySQL embedded server development files
mysql-client - MySQL database client (metapackage depending on the latest versio
mysql-client-5.5 - MySQL database client binaries
mysql-common - MySQL database common files, e.g. /etc/mysql/my.cnf
mysql-server - MySQL database server (metapackage depending on the latest versio
mysql-server-5.5 - MySQL database server binaries and system database setup
mysql-server-core-5.5 - MySQL database server binaries
mysql-source-5.5 - MySQL source
mysql-testsuite-5.5 - MySQL testsuite
Closes: 711600
Changes:
mysql-5.5 (5.5.33+dfsg-0+wheezy1) wheezy-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Imported Upstream version 5.5.33+dfsg
- Fixes: CVE-2013-5807 CVE-2013-3839 CVE-2013-3812 CVE-2013-3809
CVE-2013-3804 CVE-2013-3802 CVE-2013-3793 CVE-2013-3783 CVE-2013-1861
* Update copyright years for upstream files
* Add patches to disable the test database and anonymous access
d/p/33_scripts__mysql_create_system_tables__no_test.patch,
d/p/41_scripts__mysql_install_db.sh__no_test.patch,
d/p/50_mysql-test__db_test.patch: Restored from mysql-5.1 package,
inadvertently dropped in 5.5 transition. This removes the global
anonymous access to the database which is a security concern.
* CVE-2013-2162: Insecure creation of the credential file debian.cnf.
Set umask to 066 before creating debian.cnf file. (Closes: #711600)
(LP: #1185573)
* Add 73_fix_rpl_deadlock_innodb_test.patch.
Fixes failing rpl.rpl_deadlock_innodb test by ignoring warnings.
* Disable more test after dropping the test databases
plugin_auth, plugin_auth_qa_1 and plugin_auth_qa_2 fail as they need to
operate on test_ databases. Some adaption to either the tests or
50_mysql-test__db_test.patch might be further needed.
* Add NEWS file to document changes needed to existing databases
Checksums-Sha1:
72ff94974e1d116e679e1455615ceeb54bd86c47 3016 mysql-5.5_5.5.33+dfsg-0+wheezy1.dsc
21da4790c6bb6fa1d2acdbe270c671b5d3bac9d2 21279667 mysql-5.5_5.5.33+dfsg.orig.tar.gz
eef910258810f29cc887a0b5ccb67d5d55cb2142 376373 mysql-5.5_5.5.33+dfsg-0+wheezy1.debian.tar.gz
c82cf204d03a40f687f3caac16e55e8071bfaaf8 80306 mysql-common_5.5.33+dfsg-0+wheezy1_all.deb
03f5d7133bbc59c18dd273fac3ee59591b6c5cc7 78562 mysql-server_5.5.33+dfsg-0+wheezy1_all.deb
3aac79038fd6ddcd5d282dc509fb507f55178e38 78438 mysql-client_5.5.33+dfsg-0+wheezy1_all.deb
151d9f77d3b0449f3e7d1f66b85270ca1e2d6232 680288 libmysqlclient18_5.5.33+dfsg-0+wheezy1_amd64.deb
9f3b6e51049637a78232df7cf87cda6704025a94 3165052 libmysqld-pic_5.5.33+dfsg-0+wheezy1_amd64.deb
ee62aed37b4e2c3b89c5d37c26642097bd79340a 3163560 libmysqld-dev_5.5.33+dfsg-0+wheezy1_amd64.deb
2140a1ea93416105c1378c14ca5b95bea0ab5a54 949000 libmysqlclient-dev_5.5.33+dfsg-0+wheezy1_amd64.deb
330ea1f1755915c6fe13ae5bb88fcb0f0c08c4d3 1883082 mysql-client-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
c63f4f0db4d3aa65c7d79bef94e21bb9efb981f8 3777522 mysql-server-core-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
bbc5d36507a1a1fbcd985dfd7c4c5fadc1014fc6 2093948 mysql-server-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
29c1318979a658d8006e4118831347155033ca07 4242448 mysql-testsuite-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
0c6bf4951f9f5a7c641156ff98300e1fad033033 22802004 mysql-source-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
Checksums-Sha256:
b127966173b55a861fe3b0ec2093a459dccd37e993bc8739d0a40ece9495360b 3016 mysql-5.5_5.5.33+dfsg-0+wheezy1.dsc
d7b2653099791a036d4d77111de741d0419ff51e271ca66b83346ab378048a81 21279667 mysql-5.5_5.5.33+dfsg.orig.tar.gz
a39115bacd6113e364af4088bcd66433f00caa80116674cf1323a20fcb0b1e2f 376373 mysql-5.5_5.5.33+dfsg-0+wheezy1.debian.tar.gz
fc9b675c9cefad254235063241132d12b8a5283668448e44d8a7fbee71af49a8 80306 mysql-common_5.5.33+dfsg-0+wheezy1_all.deb
d3f823a64fbff68a262728108a4a71a90d2f2318a7a25f13f0cdf84473d69479 78562 mysql-server_5.5.33+dfsg-0+wheezy1_all.deb
18c469f6feac36018df5709a42741df12b2e459637809d60dfdde51053553d9d 78438 mysql-client_5.5.33+dfsg-0+wheezy1_all.deb
864d0a0b11ae434e51115068db8336171fd3cfe44bc0aad82a0eaf1171e78667 680288 libmysqlclient18_5.5.33+dfsg-0+wheezy1_amd64.deb
cab35633469f10f78738ff47415d9a98f918c25de886824309c43819724ebe21 3165052 libmysqld-pic_5.5.33+dfsg-0+wheezy1_amd64.deb
04e22ad14d704a9d6c343f5ce550b12e064900de21ed5604752d98e1b3530c48 3163560 libmysqld-dev_5.5.33+dfsg-0+wheezy1_amd64.deb
6099ccf92318305184a115b625375e3183476964f8e159234fe1252dea8a92cc 949000 libmysqlclient-dev_5.5.33+dfsg-0+wheezy1_amd64.deb
2e45711393e996241e20a304adbdc53470e238c965ba532bc8c9d411dddea6b6 1883082 mysql-client-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
4332d4d73f8894152cdaf70ea4ea23ec1cdb668812a6ba8f5bf134ab499c3629 3777522 mysql-server-core-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
1b2b49d90eba4c4755ffd53ba351d31bf391d7b42e4065a6bfcb1a9a11a3b4e4 2093948 mysql-server-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
070f860c52c4d01b1324528b2a172e62c18b450f92c9a1d728994583b803c96f 4242448 mysql-testsuite-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
878a96c23943cf14aab64ac6848eaece3c59092e93aa6eeab18d9ef02ab9b92a 22802004 mysql-source-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
Files:
eab95b38520876c630631eb4c69eb2a3 3016 database optional mysql-5.5_5.5.33+dfsg-0+wheezy1.dsc
f35902e01453dd7eedb2a647c69b39ec 21279667 database optional mysql-5.5_5.5.33+dfsg.orig.tar.gz
f6ba9244ed8e2af68ead5af634801ffb 376373 database optional mysql-5.5_5.5.33+dfsg-0+wheezy1.debian.tar.gz
53af8dbca74b8fec0385e581c69719a4 80306 database optional mysql-common_5.5.33+dfsg-0+wheezy1_all.deb
2064c912b8cdf957f7ad4ba6e04a57e4 78562 database optional mysql-server_5.5.33+dfsg-0+wheezy1_all.deb
dc51cd4f328534a0c2787ad644df50d1 78438 database optional mysql-client_5.5.33+dfsg-0+wheezy1_all.deb
cfcc519d5a1299a7e4783efe8f09821e 680288 libs optional libmysqlclient18_5.5.33+dfsg-0+wheezy1_amd64.deb
2d8761155114f2d001b69e2a04117b14 3165052 libdevel optional libmysqld-pic_5.5.33+dfsg-0+wheezy1_amd64.deb
a04cb4b01c79ffb8fe7d95b6770724d9 3163560 libdevel optional libmysqld-dev_5.5.33+dfsg-0+wheezy1_amd64.deb
9d4ae9c795962c1f2a88baf08575877f 949000 libdevel optional libmysqlclient-dev_5.5.33+dfsg-0+wheezy1_amd64.deb
d0240a756e6ef336e0ada22a03f52060 1883082 database optional mysql-client-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
866d099eb8d11d21c4c8bdfb363da0de 3777522 database optional mysql-server-core-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
0f212c74ab1b398167380d6b0b98d042 2093948 database optional mysql-server-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
058709e3d1560be77ebe80fb84b24f32 4242448 database optional mysql-testsuite-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
4e2169e58a2cb9dab95707875e5c1a18 22802004 database optional mysql-source-5.5_5.5.33+dfsg-0+wheezy1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=T7cV
-----END PGP SIGNATURE-----