[debian-mysql] Bug#821100: MySQL 5.5.49 for Oracle April 2016 CPU

[Lars Tangvald]

Hi,

----- carnil at debian.org wrote:

> Hi Lars,
> 
> On Wed, Apr 20, 2016 at 08:20:56AM +0200, Salvatore Bonaccorso wrote:
> > Hi Lars,
> > 
> > On Tue, Apr 19, 2016 at 12:27:51PM -0700, Lars Tangvald wrote:
> > > We've prepared MySQL 5.5.49 packages for Debian Wheezy and Jessie
> > > with fixes for the CVEs listed in Oracle's April CPU.
> > > The packages are built and tested and should be ready for upload,
> > > and I've attached the debdiff output for review.
> > > Of note is that due to upstream source changes we needed to remake
> a
> > > patch that was added for 5.5.46 to fix arm and powerpc build
> > > failures. New patch is larger, but should have the same behavior.
> > 
> > Okay.
> > 
> > Assuming some additional tests apart the testsuite have been done,
> > please proceed with the update (but with the following small
> change).
> > 
> > Use 5.5.49-0+deb7u1 instead of 5.5.49-0+deb7u1.1 for the version,
> > respectively 5.5.49-0+deb8u1 instead of 5.5.49-0+deb8u1.1.
> > 
> > Please remember to build the first upload for security master with
> -sa
> > to include the original source, then the second one without
> -sa.[*].
> > 
> > I (or someone else of the team) will release the DSA once the
> builds
> > are available.
> > 
> > Thanks already for your work on this update,
> > 
> > Regards,
> > Salvatore
> > 
> >  [*] since you (your sponsor) will not get a dak accepted mail,
> please
> >  either wait ~15 Minutes for the second upload to wait the first
> one
> >  is correctly processed or drop in in #debian-security to shortly
> >  confirm (or via mail is as well fine).
> 
> Do you have any status-update for this for us?
> 
> Regards,
> Salvatore

I fixed the version string, and the source is ready in our git repo, but there aren't many on our team with upload rights for 5.5, and they've been a bit swamped in work the last few days. Sorry for the delay, but we're hoping to get the upload done soon.

--
Lars