PublicDateAtUSN: 2013-01-16 Candidate: CVE-2012-0578 PublicDate: 2013-01-17 01:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0578 http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html https://ubuntu.com/security/notices/USN-1703-1 Description: Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer. Ubuntu-Description: Notes: jdstrand> mysql-cluster-7.0 not supported per Ubuntu Server team jdstrand> As of 2012/01/09, Oracle no longer supports MySQL 5.0. Unfortunately, because of upstream update and commit policies it is not possible to backport patches from later releases. Ubuntu is regrettably unable to support MySQL 5.0 and users are encouraged to upgrade to Ubuntu 10.04 LTS or later. Bugs: https://launchpad.net/bugs/1100264 Priority: medium Discovered-by: Assigned-to: mdeslaur CVSS: Patches_mysql-5.5: upstream_mysql-5.5: released (5.5.29) hardy_mysql-5.5: DNE lucid_mysql-5.5: DNE oneiric_mysql-5.5: DNE precise_mysql-5.5: released (5.5.29-0ubuntu0.12.04.1) quantal_mysql-5.5: released (5.5.29-0ubuntu0.12.10.1) devel_mysql-5.5: released (5.5.29-0ubuntu1)