RHBA-2013:1647 - Bug Fix Advisory

Topic

Updated mysql packages that fix several bugs are now available for Red Hat
Enterprise Linux 6.

Description

MySQL is a multi-user, multi-threaded SQL database server. It consists of the
MySQL server daemon (mysqld) and many client programs and libraries.

This update fixes the following bugs:

• Prior to this update, the mysqld daemon worked with uninitialized memory when

accessing non-nullable GEOMETRY types. Cosequenutly, mysqld could terminate
unexpectedly when the mysqldump utility was running. With this update, mysqld
initializes memory properly and thus no longer crashes in this scenario
(BZ#842052)

• Previously, the mysqldump utility expected log tables to be created on the

MySQL 5.0.x server, from which it retrieved data. Consequently, mysqldump could
not dump the MySQL system table. With this update, mysqldump no longer expects
log tables to be created, and it is now able to dump the system table in the
described scenario as expected. (BZ#877557)

• Prior to this update, the mysqld init script did not correctly verify the

status of the mysqld daemon. Consequently, the script could return an error
message even when the daemon had successfully started. The mysqld init script
has been fixed, and it now checks the daemon status properly. (BZ#884651)

• Previously, the mysql-server sub-packages did not contain the logrotate

script. Consequently, the log rotation had to be configured manually. With this
update, the logrotate script has been provided by the mysql-server sub-packages,
and users can use the script to log into the mysqld.log file by uncommenting
appropriate lines in the script. (BZ#904061)

Users of mysql are advised to upgrade to these updated packages, which fix these
bugs. After installing this update, the MySQL server daemon (mysqld) will be
restarted automatically.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 842052 - mysqld crash during mysqldump
• BZ - 877557 - mysqldump from 5.1.66 fails against 5.0 server
• BZ - 904061 - missing logrotate script

CVEs

• CVE-2013-3839
• CVE-2013-1861
• CVE-2013-3802
• CVE-2013-3804

References

(none)