Issued:

2013-11-20

Updated:

2013-11-20

RHBA-2013:1647 - mysql bug fix update

Synopsis

mysql bug fix update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated mysql packages that fix several bugs are now available for Red Hat Enterprise Linux 6.

Description

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

This update fixes the following bugs:

• Prior to this update, the mysqld daemon worked with uninitialized memory when accessing non-nullable GEOMETRY types. Cosequenutly, mysqld could terminate unexpectedly when the mysqldump utility was running. With this update, mysqld initializes memory properly and thus no longer crashes in this scenario (BZ#842052)

• Previously, the mysqldump utility expected log tables to be created on the MySQL 5.0.x server, from which it retrieved data. Consequently, mysqldump could not dump the MySQL system table. With this update, mysqldump no longer expects log tables to be created, and it is now able to dump the system table in the described scenario as expected. (BZ#877557)

• Prior to this update, the mysqld init script did not correctly verify the status of the mysqld daemon. Consequently, the script could return an error message even when the daemon had successfully started. The mysqld init script has been fixed, and it now checks the daemon status properly. (BZ#884651)

• Previously, the mysql-server sub-packages did not contain the logrotate script. Consequently, the log rotation had to be configured manually. With this update, the logrotate script has been provided by the mysql-server sub-packages, and users can use the script to log into the mysqld.log file by uncommenting appropriate lines in the script. (BZ#904061)

Users of mysql are advised to upgrade to these updated packages, which fix these bugs. After installing this update, the MySQL server daemon (mysqld) will be restarted automatically.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

Affected Products

Updated Packages

• mysql-5.1.71-1.el6.x86_64.rpm
• mysql-server-5.1.71-1.el6.s390x.rpm
• mysql-5.1.71-1.el6.src.rpm
• mysql-5.1.71-1.el6.s390x.rpm
• mysql-embedded-5.1.71-1.el6.ppc.rpm
• mysql-bench-5.1.71-1.el6.ppc64.rpm
• mysql-test-5.1.71-1.el6.x86_64.rpm
• mysql-devel-5.1.71-1.el6.i686.rpm
• mysql-devel-5.1.71-1.el6.x86_64.rpm
• mysql-server-5.1.71-1.el6.ppc64.rpm
• mysql-bench-5.1.71-1.el6.s390x.rpm
• mysql-bench-5.1.71-1.el6.i686.rpm
• mysql-libs-5.1.71-1.el6.ppc.rpm
• mysql-server-5.1.71-1.el6.i686.rpm
• mysql-embedded-devel-5.1.71-1.el6.s390x.rpm
• mysql-server-5.1.71-1.el6.x86_64.rpm
• mysql-test-5.1.71-1.el6.ppc64.rpm
• mysql-embedded-devel-5.1.71-1.el6.x86_64.rpm
• mysql-embedded-devel-5.1.71-1.el6.i686.rpm
• mysql-5.1.71-1.el6.ppc64.rpm
• mysql-libs-5.1.71-1.el6.s390.rpm
• mysql-embedded-5.1.71-1.el6.i686.rpm
• mysql-debuginfo-5.1.71-1.el6.i686.rpm
• mysql-libs-5.1.71-1.el6.i686.rpm
• mysql-embedded-5.1.71-1.el6.ppc64.rpm
• mysql-devel-5.1.71-1.el6.ppc.rpm
• mysql-debuginfo-5.1.71-1.el6.s390x.rpm
• mysql-embedded-devel-5.1.71-1.el6.ppc64.rpm
• mysql-embedded-5.1.71-1.el6.s390.rpm
• mysql-test-5.1.71-1.el6.s390x.rpm
• mysql-libs-5.1.71-1.el6.ppc64.rpm
• mysql-5.1.71-1.el6.i686.rpm
• mysql-embedded-5.1.71-1.el6.x86_64.rpm
• mysql-devel-5.1.71-1.el6.s390.rpm
• mysql-debuginfo-5.1.71-1.el6.ppc.rpm
• mysql-debuginfo-5.1.71-1.el6.ppc64.rpm
• mysql-embedded-devel-5.1.71-1.el6.ppc.rpm
• mysql-test-5.1.71-1.el6.i686.rpm
• mysql-embedded-5.1.71-1.el6.s390x.rpm
• mysql-embedded-devel-5.1.71-1.el6.s390.rpm
• mysql-devel-5.1.71-1.el6.s390x.rpm
• mysql-devel-5.1.71-1.el6.ppc64.rpm
• mysql-libs-5.1.71-1.el6.s390x.rpm
• mysql-debuginfo-5.1.71-1.el6.s390.rpm
• mysql-debuginfo-5.1.71-1.el6.x86_64.rpm
• mysql-libs-5.1.71-1.el6.x86_64.rpm
• mysql-bench-5.1.71-1.el6.x86_64.rpm

Fixes

• This content is not included.BZ - 842052
• This content is not included.BZ - 877557
• This content is not included.BZ - 904061

CVEs

• CVE-2013-3839
• CVE-2013-1861
• CVE-2013-3802
• CVE-2013-3804

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.