Bug#851233: [debian-mysql] Bug#851233: Bug#851233: Security fixes from the January 2017 CPU

2017-01-18 Thread Lars Tangvald
- car...@debian.org wrote: > Hi Lars, > > On Wed, Jan 18, 2017 at 06:41:40AM -0800, Lars Tangvald wrote: > > > > - car...@debian.org wrote: > > > > > > > > >With that fixed, and build with -sa (to include the orig > tarball) > > > > >please do upload to security-master. > > > > Do we

Bug#851233: [debian-mysql] Bug#851233: Bug#851233: Security fixes from the January 2017 CPU

2017-01-18 Thread Salvatore Bonaccorso
Hi Lars, On Wed, Jan 18, 2017 at 06:41:40AM -0800, Lars Tangvald wrote: > > - car...@debian.org wrote: > > > > > >With that fixed, and build with -sa (to include the orig tarball) > > > >please do upload to security-master. > > > Do we have access to upload here? I think the security team h

Bug#851233: [debian-mysql] Bug#851233: Bug#851233: Security fixes from the January 2017 CPU

2017-01-18 Thread Lars Tangvald
- car...@debian.org wrote: > > >With that fixed, and build with -sa (to include the orig tarball) > > >please do upload to security-master. > > Do we have access to upload here? I think the security team have > handled the > > upload in the past. > > yes it nees to be a key in the DD keyrin

Bug#851233: [debian-mysql] Bug#851233: Bug#851233: Security fixes from the January 2017 CPU

2017-01-18 Thread Salvatore Bonaccorso
Hi Lars, On Wed, Jan 18, 2017 at 12:45:45PM +0100, Lars Tangvald wrote: > Hi, > > On 01/18/2017 12:39 PM, Salvatore Bonaccorso wrote: > >Hi Lars, > > > >On Wed, Jan 18, 2017 at 10:33:30AM +0100, Lars Tangvald wrote: > >>Hi, > >> > >>The update builds and passes testing. > >>I've attached debdiff

Bug#851233: [debian-mysql] Bug#851233: Bug#851233: Security fixes from the January 2017 CPU

2017-01-18 Thread Lars Tangvald
Hi, On 01/18/2017 12:39 PM, Salvatore Bonaccorso wrote: Hi Lars, On Wed, Jan 18, 2017 at 10:33:30AM +0100, Lars Tangvald wrote: Hi, The update builds and passes testing. I've attached debdiff output for Wheezy and Jessie for this update. Aside from the changelog, the only change to packaging

Bug#851233: [debian-mysql] Bug#851233: Bug#851233: Security fixes from the January 2017 CPU

2017-01-18 Thread Salvatore Bonaccorso
Hi Lars, On Wed, Jan 18, 2017 at 10:33:30AM +0100, Lars Tangvald wrote: > Hi, > > The update builds and passes testing. > I've attached debdiff output for Wheezy and Jessie for this update. Aside > from the changelog, the only change to packaging is a patch for a test > (main.events_2) that was f

Bug#851233: [debian-mysql] Bug#851233: Security fixes from the January 2017 CPU

2017-01-18 Thread Lars Tangvald
CVE List for 5.5: CVE-2017-3238 CVE-2017-3243 CVE-2017-3244 CVE-2017-3258 CVE-2017-3265 CVE-2017-3291 CVE-2017-3312 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 -- Lars On 01/13/2017 09:19 AM, Norvald H. Ryeng wrote: Source: mysql-5.5 Version: 5.5.53-0+deb8u1 Severity: grave Tags: security upstrea

Bug#851233: [debian-mysql] Bug#851233: Security fixes from the January 2017 CPU

2017-01-17 Thread Lars Tangvald
I've built and tested the updates, and will pass debdiffs on to the security team once the CVE list is available. -- Lars - norvald.ry...@oracle.com wrote: > Source: mysql-5.5 > Version: 5.5.53-0+deb8u1 > Severity: grave > Tags: security upstream fixed-upstream > > The Oracle Critical Patch

Bug#851233: Security fixes from the January 2017 CPU

2017-01-13 Thread Norvald H. Ryeng
Source: mysql-5.5 Version: 5.5.53-0+deb8u1 Severity: grave Tags: security upstream fixed-upstream The Oracle Critical Patch Update for January 2017 will be released on Tuesday, January 17. According to the pre-release announcement [1], it will contain information about CVEs fixed in MySQL 5.5.