Secunia

Ubuntu has issued an update for mysql. This fixes some vulnerabilities, which potentially can be exploited by malicious users to compromise a vulnerable system and by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.

For more information:
SA14547

A security issue caused due to incorrect ownership on the "/usr/share/mysql/" directory can also be exploited by a malicious, local user with "mysql" privileges to gain root privileges when root executes a modified script in the directory.

Solution
Apply updated packages.
Further details available in Customer Area

Provided and/or discovered by
Matt Brubeck

Original Advisory
http://www.ubuntulinux.org/support/documentation/usn/usn-96-1

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area