Mysql-5.1

During the last weeks, MySQL suffered from many vulnerabilities (see DSA-2429-1 and DSA-2496-1). Due to the non-disclosure of security patch information from Oracle, the Debian security team is now forced to ship upstreams version update of MySQL 5.1 (5.1.63 as of this writing). Then it makes no sense for Dotdeb to duplicate this effort and to maintain the same versions of MySQL 5.1 for Squeeze with the same features and level of optimization. As a consequence the MySQL 5.1 packages has been removed from the Dotdeb repository (you’ll find archived versions here). ...

MySQL 5.1.62 packages are now available for Debian 6.0 “Squeeze” on amd64 and i386 architectures. This is a important security update that fixes unspecified vulnerabilities identified by Oracle in all versions of MySQL 5.1 earlier than 5.1.62. If you did not upgrade to MySQL 5.5, please consider upgrading your MySQL server (at least) to 5.1.62. FYI, CVE list is as follows : CVE-2012-1703 CVE-2012-0583 CVE-2012-1688 CVE-2012-1690. The corresponding Pinba storage engine has also been rebuilt. ...

MySQL 5.1.61 packages are now available for Debian 6.0 “Squeeze” on amd64 and i386 architectures. This is a very important security update that fixes unspecified vulnerabilities identified by Oracle in all versions of MySQL 5.1 earlier than 5.1.61. If you did not upgrade to MySQL 5.5, please consider upgrading your MySQL server (at least) to 5.1.61. FYI, CVE list is as follows : CVE-2011-2262 CVE-2012-0075 CVE-2012-0087 CVE-2012-0101 CVE-2012-0102 CVE-2012-0112 CVE-2012-0113 CVE-2012-0114 CVE-2012-0115 CVE-2012-0116 CVE-2012-0118 CVE-2012-0119 CVE-2012-0120 CVE-2012-0484 CVE-2012-0485 CVE-2012-0490 CVE-2012-0492. The corresponding Pinba storage engine has also been rebuilt. ...

MySQL 5.1.57 packages are now available on Dotdeb : for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny” for the amd64 and i386 architectures The corresponding Pinba storage engine has also been rebuilt (Squeeze only). And, as usual, please read the Changelog of this maintainance release before upgrading.

MySQL 5.1.56 packages are now available on Dotdeb : for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny” for the amd64 and i386 architectures Of course, the corresponding Pinba storage engine has been rebuilt (Squeeze only). But take care to the plugin-load directive in your /etc/mysql/my.cnf file : MySQL does not support several plugin-load directives and always keep the last read. Then if you want, for example, use the Pinba storage engine while having the the InnoDB plugin loaded, you should uncomment the following line. ...

MySQL 5.1.55 packages are now available on Dotdeb : for Debian 6.0 “Squeeze” and Debian 5.0 “Lenny” for the amd64 and i386 architectures As usual, please read the Changelog of this maintainance release before upgrading. Note 1 : the Pinba storage engine for MySQL has been rebuilt against MySQL 5.1.55 (Squeeze only) Note 2 : Maatkit has been updated to 7284 Note 3 : if you had issues with loading the InnoDB plugin on Squeeze, your feedback is welcome (post a comment below). ...

MySQL 5.1.54 packages are now available on Dotdeb in amd64/i386 flavours for Lenny and Squeeze. As usual, please read the Changelog of this maintainance release before upgrading. Now, about MySQL 5.5 (I was asked on Twitter or in the comments here), it will be available on Dotdeb as soon as it is in Debian Sid or experimental. Please be patient. If you don’t need some 5.5 specific features, such as semi-sync replication, and if you just need to boost your InnoDB performances, you really should take a look at your /etc/mysql/my.cnf file and enable the InnoDB plugin. ...

MySQL 5.1.53 packages for Debian 5.0 « Lenny » are now available on Dotdeb in amd64/i386 flavours. Please note that they’re available as preview for Squeeze too. This maintainance release fixes many bugs and security issues. Upgrading is strongly recommended after having read the Changelogs here and here.

MySQL versions prior to 5.1.51 (including 5.1.50) suffer from a vulnerability in the processing of arguments passed to the LEAST() or GREATEST() functions. This issue could be exploited by a malicious user to cause a server crash, leading to a DoS condition. You really should upgrade your Lenny servers (amd64 or i386) with the new packages of MySQL 5.1.51 from Dotdeb. As usual, don’t forget to read the Changelog before upgrading. ...

Maatkit is one of the great Open Source tools (among Percona Server, Xtrabackup and so on…) published by Percona. It’s a collection of utilities that help MySQL DBAs in many redundant, complex or boring tasks. For example : mk-query-digest that outputs a digest of the queries from a slow-query logfile or from a running MySQL server, mk-slave-delay that could help you to keep a copy of your databases while rolling back a new version of your application, mk-parallel-dump and mk-parallel-restore to speed up your dump/load processes, mk-table-checksum that checks the consistency of your MySQL slave, … If you’re a MySQL DBA that runs Debian servers, you really should install the new Maatkit packages from Dotdeb and read its documentation. There is a tool that will help you on your daily usage of MySQL, for sure! ...