Your message dated Fri, 25 Jul 2014 15:32:22 +0000
with message-id <e1xahtq-000899...@franck.debian.org>
and subject line Bug#754941: fixed in mysql-5.5 5.5.38-0+wheezy1
has caused the Debian Bug report #754941,
regarding mysql-5.5: Multiple security from July 2014 CPU
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
754941: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754941
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: mysql-5.5
Severity: grave
Tags: security
Justification: user security hole
Hi,
please see
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: mysql-5.5
Source-Version: 5.5.38-0+wheezy1
We believe that the bug you reported is fixed in the latest version of
mysql-5.5, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 754...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <car...@debian.org> (supplier of updated mysql-5.5 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 19 Jul 2014 16:15:21 +0200
Source: mysql-5.5
Binary: libmysqlclient18 libmysqld-pic libmysqld-dev libmysqlclient-dev
mysql-common mysql-client-5.5 mysql-server-core-5.5 mysql-server-5.5
mysql-server mysql-client mysql-testsuite-5.5 mysql-source-5.5
Architecture: source all amd64
Version: 5.5.38-0+wheezy1
Distribution: wheezy-security
Urgency: high
Maintainer: Debian MySQL Maintainers <pkg-mysql-ma...@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Description:
libmysqlclient-dev - MySQL database development files
libmysqlclient18 - MySQL database client library
libmysqld-dev - MySQL embedded database development files
libmysqld-pic - PIC version of MySQL embedded server development files
mysql-client - MySQL database client (metapackage depending on the latest
versio
mysql-client-5.5 - MySQL database client binaries
mysql-common - MySQL database common files, e.g. /etc/mysql/my.cnf
mysql-server - MySQL database server (metapackage depending on the latest
versio
mysql-server-5.5 - MySQL database server binaries and system database setup
mysql-server-core-5.5 - MySQL database server binaries
mysql-source-5.5 - MySQL source
mysql-testsuite-5.5 - MySQL testsuite
Closes: 754941
Changes:
mysql-5.5 (5.5.38-0+wheezy1) wheezy-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Imported Upstream version 5.5.38 fo fix security issues:
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- CVE-2014-2494
- CVE-2014-4207
- CVE-2014-4258
- CVE-2014-4260
(Closes: #754941)
* Update copyright years for upstream files
Checksums-Sha1:
383b3cecfdab8178c3d109d25efaf7fdb1cff9b3 2938 mysql-5.5_5.5.38-0+wheezy1.dsc
569c76385b24b981df35e703eefd34f9f76a2ee2 21739681 mysql-5.5_5.5.38.orig.tar.gz
8fc276bcdef617d2f11d8f123b749b555f7aa9bb 376907
mysql-5.5_5.5.38-0+wheezy1.debian.tar.gz
0d0d15142f7f267711f46eec0c83c4111e899cff 78574
mysql-common_5.5.38-0+wheezy1_all.deb
b1ce0b482ffa0d23f2da954bf456382b4aad9e11 76860
mysql-server_5.5.38-0+wheezy1_all.deb
c0e2f51a0a291f36c475fe2da2b77cbf0b7b10bc 76736
mysql-client_5.5.38-0+wheezy1_all.deb
0e253ba5a86f78b14bd5ac8e0c2c3ba80e0292c7 679972
libmysqlclient18_5.5.38-0+wheezy1_amd64.deb
5d3b01813e37db782f1de1f36a0971a921521583 3169042
libmysqld-pic_5.5.38-0+wheezy1_amd64.deb
7e7af31ef37cbc96a61b91458ce3dc6957d47c98 3164876
libmysqld-dev_5.5.38-0+wheezy1_amd64.deb
9cdfd7697b94baf9be4884a0db25c5990d93089e 948452
libmysqlclient-dev_5.5.38-0+wheezy1_amd64.deb
955e3226e13ab99e899023040604a45347e8ba45 1886316
mysql-client-5.5_5.5.38-0+wheezy1_amd64.deb
748607fe3c9401b2f0fdb0ecbbb89563d5c38b12 3777054
mysql-server-core-5.5_5.5.38-0+wheezy1_amd64.deb
0aa5cf1c80376b5795d3efa2a5eb61c379b67834 2097964
mysql-server-5.5_5.5.38-0+wheezy1_amd64.deb
ee3dd938f52b0661e05f05178ea844431e6c5ea6 4247560
mysql-testsuite-5.5_5.5.38-0+wheezy1_amd64.deb
1d2af793caae54c8bef056c7618fa21e9a98ad53 22935164
mysql-source-5.5_5.5.38-0+wheezy1_amd64.deb
Checksums-Sha256:
8a0d7fce71328127c94ed9f9316437fb37336526084e8d293af2520b82300514 2938
mysql-5.5_5.5.38-0+wheezy1.dsc
61869633924ab243a3f676cf6b8feb66b672e3c07566a7190f0f1bb8c9b2fc81 21739681
mysql-5.5_5.5.38.orig.tar.gz
38e2b65a3ab1b0d494de8b4f0c7822e6b6d7cabcfdec6bcbe1ae920a6f8042fd 376907
mysql-5.5_5.5.38-0+wheezy1.debian.tar.gz
f162f8149861ab9d381bc2fdbd7b881aed8722421e8ea9aa35b603eeda735ddc 78574
mysql-common_5.5.38-0+wheezy1_all.deb
0a27abe55f4a1ae69f8249c09bdf003e46812751432edd85f8c8dbcef8b0029b 76860
mysql-server_5.5.38-0+wheezy1_all.deb
3caa088d066b82dc263d1877902f4e2997f1a4499cdc09df7e4792ce69ef9313 76736
mysql-client_5.5.38-0+wheezy1_all.deb
a00f713bf71cc2b902981bde6c834a7aa523afbb161c04b9717bf3b907c3afdb 679972
libmysqlclient18_5.5.38-0+wheezy1_amd64.deb
49e9078179e77d14e750d4dcee3352305c1e1bc9bdaf2f9be65943db964dfcff 3169042
libmysqld-pic_5.5.38-0+wheezy1_amd64.deb
55ff9a44d76216b1f3a983da28c1eb27605cf37bb2d3ee3093965f56ead01627 3164876
libmysqld-dev_5.5.38-0+wheezy1_amd64.deb
d22d509846f1bc0f46e593574d35233bf44f818f9545c83aa80b6dcbe350ea40 948452
libmysqlclient-dev_5.5.38-0+wheezy1_amd64.deb
547320a9ac09b5fbee916a3561407579f3f1a05398e1800aee87517013feccbf 1886316
mysql-client-5.5_5.5.38-0+wheezy1_amd64.deb
7c2e95581d6efe6bc9a87e0b26a74c2eb40fc0d8b31e2ffb7751511f0fd0163f 3777054
mysql-server-core-5.5_5.5.38-0+wheezy1_amd64.deb
84ddc5a1819605a5107a183320c3b344f1ff08cb782fd0506d37681deba4bd9b 2097964
mysql-server-5.5_5.5.38-0+wheezy1_amd64.deb
f5d817dd30b0b1e53068d8a56ee0a32831b643d153093332fb62edfd3f8359d5 4247560
mysql-testsuite-5.5_5.5.38-0+wheezy1_amd64.deb
6f894f9245c84d528a287f1926ca4ee4f93adebc3a529cc5c5a7f6ccee9dbd53 22935164
mysql-source-5.5_5.5.38-0+wheezy1_amd64.deb
Files:
e6b4a3b5ed01d13923fd0e0f1d1b4e91 2938 database optional
mysql-5.5_5.5.38-0+wheezy1.dsc
df5071c49764c3ad65df04ff20866a86 21739681 database optional
mysql-5.5_5.5.38.orig.tar.gz
b44eff06c6bdfcc33ff7204fb1bcaa94 376907 database optional
mysql-5.5_5.5.38-0+wheezy1.debian.tar.gz
7937044a95f330ae74d6465a6b60d95d 78574 database optional
mysql-common_5.5.38-0+wheezy1_all.deb
9cc5af6a69e718c631f14e7868e4e4ca 76860 database optional
mysql-server_5.5.38-0+wheezy1_all.deb
5d8b888c8616393ef09a0cafe1b78330 76736 database optional
mysql-client_5.5.38-0+wheezy1_all.deb
0e8e128ab59148336829f262c8b7ba31 679972 libs optional
libmysqlclient18_5.5.38-0+wheezy1_amd64.deb
4dd9c4c903aa1fc1dc0509ee8836af89 3169042 libdevel optional
libmysqld-pic_5.5.38-0+wheezy1_amd64.deb
a412269c20c4bbb90fd2e32133c452fb 3164876 libdevel optional
libmysqld-dev_5.5.38-0+wheezy1_amd64.deb
76eb172af69203b77a0386435e8cf94c 948452 libdevel optional
libmysqlclient-dev_5.5.38-0+wheezy1_amd64.deb
952757ace4ac2867d7d0f5623ed2a5f7 1886316 database optional
mysql-client-5.5_5.5.38-0+wheezy1_amd64.deb
969e02f7660604697afef12e3d5ebf27 3777054 database optional
mysql-server-core-5.5_5.5.38-0+wheezy1_amd64.deb
4aab8040a54f049c064d51ef5375db2f 2097964 database optional
mysql-server-5.5_5.5.38-0+wheezy1_amd64.deb
44e72877862cfb72714c6c4bf2718a67 4247560 database optional
mysql-testsuite-5.5_5.5.38-0+wheezy1_amd64.deb
ec6a0ad502e76f63a55511b347d484a3 22935164 database optional
mysql-source-5.5_5.5.38-0+wheezy1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=Uiv4
-----END PGP SIGNATURE-----
--- End Message ---