ALAS-2012-044

Amazon Linux 1 Security Advisory: ALAS-2012-44
Advisory Release Date: 2012-02-15 17:18 Pacific
Advisory Updated Date: 2014-09-14 15:29 Pacific

Severity: Important

References: CVE-2011-2262 CVE-2012-0075 CVE-2012-0087 CVE-2012-0101 CVE-2012-0112 CVE-2012-0113 CVE-2012-0114 CVE-2012-0115 CVE-2012-0116 CVE-2012-0118 CVE-2012-0119 CVE-2012-0120 CVE-2012-0484 CVE-2012-0485 CVE-2012-0490 CVE-2012-0492 RHSA-2012-0105
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section. (CVE-2011-2262, CVE-2012-0075, CVE-2012-0087, CVE-2012-0101, CVE-2012-0102, CVE-2012-0112, CVE-2012-0113, CVE-2012-0114, CVE-2012-0115, CVE-2012-0116, CVE-2012-0118, CVE-2012-0119, CVE-2012-0120, CVE-2012-0484, CVE-2012-0485, CVE-2012-0490, CVE-2012-0492)

These updated packages upgrade MySQL to version 5.1.61. Refer to the MySQL release notes (http://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html) for a full list of changes:

Affected Packages:

mysql

Issue Correction:
Run yum update mysql to update your system.

New Packages:

i686:
    mysql-embedded-devel-5.1.61-1.27.amzn1.i686
    mysql-test-5.1.61-1.27.amzn1.i686
    mysql-debuginfo-5.1.61-1.27.amzn1.i686
    mysql-embedded-5.1.61-1.27.amzn1.i686
    mysql-libs-5.1.61-1.27.amzn1.i686
    mysql-server-5.1.61-1.27.amzn1.i686
    mysql-bench-5.1.61-1.27.amzn1.i686
    mysql-5.1.61-1.27.amzn1.i686
    mysql-devel-5.1.61-1.27.amzn1.i686

src:
    mysql-5.1.61-1.27.amzn1.src

x86_64:
    mysql-5.1.61-1.27.amzn1.x86_64
    mysql-libs-5.1.61-1.27.amzn1.x86_64
    mysql-server-5.1.61-1.27.amzn1.x86_64
    mysql-embedded-devel-5.1.61-1.27.amzn1.x86_64
    mysql-debuginfo-5.1.61-1.27.amzn1.x86_64
    mysql-devel-5.1.61-1.27.amzn1.x86_64
    mysql-bench-5.1.61-1.27.amzn1.x86_64
    mysql-test-5.1.61-1.27.amzn1.x86_64
    mysql-embedded-5.1.61-1.27.amzn1.x86_64

Additional References

Red Hat: CVE-2011-2262, CVE-2012-0075, CVE-2012-0087, CVE-2012-0101, CVE-2012-0112, CVE-2012-0113, CVE-2012-0114, CVE-2012-0115, CVE-2012-0116, CVE-2012-0118, CVE-2012-0119, CVE-2012-0120, CVE-2012-0484, CVE-2012-0485, CVE-2012-0490, CVE-2012-0492

Mitre: CVE-2011-2262, CVE-2012-0075, CVE-2012-0087, CVE-2012-0101, CVE-2012-0112, CVE-2012-0113, CVE-2012-0114, CVE-2012-0115, CVE-2012-0116, CVE-2012-0118, CVE-2012-0119, CVE-2012-0120, CVE-2012-0484, CVE-2012-0485, CVE-2012-0490, CVE-2012-0492