mysql-5.1.63 is available at http://www.mysql.com/downloads/mysql/5.1.html#downloads It fixes several bugs.
CVE-2012-1734 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1734): Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer. CVE-2012-1689 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-1689): Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer. CVE-2012-0540 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0540): Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.
CVE-2012-2749 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2749): MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.
CVE-2012-3197 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3197): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Replication. CVE-2012-3180 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3180): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer. CVE-2012-3177 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3177): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server. CVE-2012-3173 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3173): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB Plugin. CVE-2012-3167 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3167): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search. CVE-2012-3166 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3166): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB. CVE-2012-3163 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3163): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema. CVE-2012-3160 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3160): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation. CVE-2012-3158 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3158): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol. CVE-2012-3150 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3150): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
Why is this tagged ebuild+? 5.1.66 is in the tree and a stable candidate. 5.5 was only moved out of p.mask in the last week.
(In reply to comment #4) > Why is this tagged ebuild+? > 5.1.66 is in the tree and a stable candidate. > > 5.5 was only moved out of p.mask in the last week. Great, thanks. Arches, please test and mark stable =dev-db/mysql-5.1.66
Arch teams, please test and mark stable: =dev-db/mysql-5.1.66 Stable KEYWORDS : alpha amd64 arm hppa ia64 ppc ppc64 s390 sh sparc x86
x86 done.
Stable for HPPA.
amd64 stable
ppc done
arm stable
alpha/ia64/s390/sh/sparc stable
stable on ppc64, closing
Thanks, everyone. Added to existing GLSA request.
This issue was resolved and addressed in GLSA 201308-06 at http://security.gentoo.org/glsa/glsa-201308-06.xml by GLSA coordinator Sergey Popov (pinkbyte).
