Mysql

During the last weeks, MySQL suffered from many vulnerabilities (see DSA-2429-1 and DSA-2496-1). Due to the non-disclosure of security patch information from Oracle, the Debian security team is now forced to ship upstreams version update of MySQL 5.1 (5.1.63 as of this writing). Then it makes no sense for Dotdeb to duplicate this effort and to maintain the same versions of MySQL 5.1 for Squeeze with the same features and level of optimization. As a consequence the MySQL 5.1 packages has been removed from the Dotdeb repository (you’ll find archived versions here). ...

Percona toolkit 2.1.2 is now available on Dotdeb for Debian 6.0 “Squeeze”. It brings a lot of bug fixes : pt-table-sync is now working properly, the --lock-and-rename feature has been disabled when using it with MySQL versions that don’t support it reliably. pt-table-checksum and pt-online-schema-change have been enhanced to add even more safety checks, and to detect and deal with some MySQL optimizer misbehaviors, as well as to handle more edge-case behaviors related to things like replication lag. A variety of bugfixes in pretty much every tool because of an expanded test coverage : more MySQL versions, more operating system platforms, more types of MySQL server settings, and more versions of Perl. Baron Schwartz also wrote a blog post about it.

The packages of MySQL 5.5.25 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. They fixes some InnoDB- and replication-related issues. As usual, please read carefully the full Changelog before upgrading.

The packages of MySQL 5.5.24 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures. It fixes an undisclosed security issue (thanks Oracle) and some other bugs as well. As usual, please read carefully the full Changelog before upgrading. Note : the packages have been updated to include a missing init script. Sorry for the mess.

MySQL 5.1.62 packages are now available for Debian 6.0 “Squeeze” on amd64 and i386 architectures. This is a important security update that fixes unspecified vulnerabilities identified by Oracle in all versions of MySQL 5.1 earlier than 5.1.62. If you did not upgrade to MySQL 5.5, please consider upgrading your MySQL server (at least) to 5.1.62. FYI, CVE list is as follows : CVE-2012-1703 CVE-2012-0583 CVE-2012-1688 CVE-2012-1690. The corresponding Pinba storage engine has also been rebuilt. ...

The packages of MySQL 5.5.23 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with no major change except bug fixes. As usual, please read carefully the full Changelog before upgrading.

Percona toolkit 2.1.1 is now available on Dotdeb for Debian 6.0 “Squeeze”. You’ll find its Changelog here. 2.1 introduces a lot of new code for: pt-online-schema-change (completely redesigned) pt-mysql-summary (completely redesigned) pt-summary (completely redesigned) pt-fingerprint (new tool) pt-table-usage (new tool) Baron Schwartz also wrote a blog post that presents pt-online-schema-change, a new and useful online schema change tool.

The packages of MySQL 5.5.22 are now available for Debian 6.0 “Squeeze” on both amd64 and i386 architectures with no major change except bug fixes. As usual, please read carefully the full Changelogs of MySQL 5.5.21 and MySQL 5.5.22 before upgrading.

Percona toolkit 2.0.4 is now available on Dotdeb for Debian 6.0 “Squeeze”. You’ll find its Changelog here and an announce by Baron Schwartz here.

MySQL 5.1.61 packages are now available for Debian 6.0 “Squeeze” on amd64 and i386 architectures. This is a very important security update that fixes unspecified vulnerabilities identified by Oracle in all versions of MySQL 5.1 earlier than 5.1.61. If you did not upgrade to MySQL 5.5, please consider upgrading your MySQL server (at least) to 5.1.61. FYI, CVE list is as follows : CVE-2011-2262 CVE-2012-0075 CVE-2012-0087 CVE-2012-0101 CVE-2012-0102 CVE-2012-0112 CVE-2012-0113 CVE-2012-0114 CVE-2012-0115 CVE-2012-0116 CVE-2012-0118 CVE-2012-0119 CVE-2012-0120 CVE-2012-0484 CVE-2012-0485 CVE-2012-0490 CVE-2012-0492. The corresponding Pinba storage engine has also been rebuilt. ...