http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-3682 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-3677 mysql-5.0.92 is not yet released.
mysql-5.0.92 has been released on 7th Feb 2011: http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html Maintainers, please bump the ebuild in the tree.
I did a bump in the overlay, but it's still running tests. If that goes well I'll add it to the tree soon.
A fixed version of mysql was stabilized in bug 344987. GLSA Vote: Yes.
Vote: YES. Added to pending GLSA request.
This issue was resolved and addressed in GLSA 201201-02 at http://security.gentoo.org/glsa/glsa-201201-02.xml by GLSA coordinator Tim Sammut (underling).