Commit graph

38 commits

Author SHA1 Message Date
tron
c434ac2317 Add a patch for CVE-2009-2446 based on the description in the report. 2009-07-19 13:50:20 +00:00
joerg
0268c554bd Remove @dirrm entries from PLISTs 2009-06-14 17:38:38 +00:00
wiz
272d51cc21 Recursive ABI depends update and PKGREVISION bump for readline-6.0 shlib
major change.

Reported by Robert Elz in PR 41345.
2009-05-20 00:58:05 +00:00
he
d3d20e5d7c Upgrade from version 5.0.67 to 5.0.67nb1.
Two changes to the rc.d script:
 1) Move the setting of pidfile to a place so that setting mysqld_datadir
    in rc.conf will actually work; otherwise, if you use a non-default
    mysqld_datadir, mysqld will not start.
 2) ad@ pointed me to http://bugs.mysql.com/bug.php?id=18526, and said
    that --skip-thread-priority should not be used on NetBSD, and the
    PR spoke about Darwin / OS/X.  I'm guessing that this might work
    if the host platform is Linux or SunOS (the latter is unconfirmed).
    So add that option to the startup in all other cases.
2009-02-04 21:17:45 +00:00
taca
06c6aabaa4 Update mysql5-server pacakge to 5.0.67.
This is security fix.

For complete changes, please refer
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-67.html.
Here is a part of it.


Functionality added or changed:

Security Enhancement:

  To enable stricter control over the location from which user-defined
  functions can be loaded, the plugin_dir system variable has been
  backported from MySQL 5.1. If the value is non-empty, user-defined
  function object files can be loaded only from the directory named by this
  variable. If the value is empty, the behavior that is used before 5.0.67
  applies: The UDF object files must be located in a directory that is
  searched by your system's dynamic linker. (Bug#37428)

Important Change: Incompatible Change:

  The FEDERATED storage engine is now disabled by default in the .cnf files
  shipped with MySQL distributions (my-huge.cnf, my-medium.cnf, and so
  forth). This affects server behavior only if you install one of these
  files. (Bug#37069)

Cluster API: Important Change:

  Because NDB_LE_MemoryUsage.page_size_kb shows memory page sizes in bytes
  rather than kilobytes, it has been renamed to page_size_bytes. The name
  page_size_kb is now deprecated and thus subject to removal in a future
  release, although it currently remains supported for reasons of backward
  compatibility. See The Ndb_logevent_type Type, for more information about
  NDB_LE_MemoryUsage. (Bug#30271)

Important Change:

  Some changes were made to CHECK TABLE ... FOR UPGRADE and REPAIR TABLE
  with respect to detection and handling of tables with incompatible .frm
  files (files created with a different version of the MySQL server). These
  changes also affect mysqlcheck because that program uses CHECK TABLE and
  REPAIR table, and thus also mysql_upgrade because that program invokes
  mysqlcheck.
2008-09-18 11:51:37 +00:00
tron
96f9afbcd8 Add patch from <http://lists.mysql.com/commits/43206> to fix the
security vulnerability reported in CVE-2008-2079.
2008-07-01 09:22:59 +00:00
martti
e9a27bcc0e Updated mysql to 5.0.51b
* Security fixes
* Other bug fixes

See also:
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-51a.html
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-51b.html
2008-06-30 12:01:47 +00:00
jlam
d10fc61853 + Remove explicit naming of "-lncurses -ltermcap" as the way to get
the termcap libraries.  Including termcap.buildlink3.mk (indirectly
  through including readline/buildlink3.mk) will do the right thing.

+ Remove readline dependency from Makefile.common and add it into
  mysql5-client/Makefile.  Only the -client package needs and uses
  readline.  The -server package only "needs" it to placate the
  configure script, but none of its installed binaries are linked
  against it.

+ Add full DESTDIR support to the -client and -server packages.

Bump the PKGREVISION of mysql5-client to 3.

The PKGREVISION of mysql5-server remains unchanged since there are
no user-visible changes to the binary package.
2008-03-06 16:50:38 +00:00
rillig
ab11d07c64 Added some patches to fix the use of the sigsend() function, which is
not available on NetBSD.
2008-01-22 00:41:59 +00:00
tnn
ad6ceadd25 Per the process outlined in revbump(1), perform a recursive revbump
on packages that are affected by the switch from the openssl 0.9.7
branch to the 0.9.8 branch. ok jlam@
2008-01-18 05:06:18 +00:00
tron
9f33908b1f Update "mysql5-client" and "mysql5-server" packages to version 5.0.51.
This version fixes a lot of bugs including the security vulnerability
reported in CVE-2007-5969.

A complete list of the changes can be found here:
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-51.html
2007-12-14 13:36:52 +00:00
obache
3125092474 Marked as MAKE_JOBS_SAFE=no.
Pointed out by Gergo Szakal in PR 36711.
2007-07-31 14:10:11 +00:00
tron
114020c045 Update "mysql5-client" and "mysql5-server" packages to version 5.0.45.
Change since version 5.0.41:
- Functionality added or changed:
  - A new status variable, Com_call_procedure, indicates the number of calls
    to stored procedures. (Bug#27994)
  - NDB Cluster: The server source tree now includes scripts to simplify
    building MySQL with SCI support. For more information about SCI
    interconnects and these build scripts, see Section 15.9.1,
    Configuring MySQL Cluster to use SCI Sockets. (Bug#25470)
  - Prior to this release, when DATE values were compared with DATETIME values
    the time portion of the DATETIME value was ignored. Now a DATE value is
    coerced to the DATETIME type by adding the time portion as 00:00:00. To
    mimic the old behavior use the CAST() function in the following way:
    SELECT date_field = CAST(NOW() as DATE);. (Bug#28929)
- A large number of bugs including these security problems have been fixed:
  - A malformed password packet in the
    connection protocol could cause the server to crash. Thanks for Dormando
    for reporting this bug and providing details and a proof of concept.
    (Bug#28984)
  - CREATE TABLE LIKE did not require any privileges on the source table. Now
    it requires the SELECT privilege. (Bug#25578)
  - In addition, CREATE TABLE LIKE was not isolated from alteration by other
    connections, which resulted in various errors and incorrect binary log
    order when trying to execute concurrently a CREATE TABLE LIKE statement
    and either DDL statements on the source table or DML or DDL statements on
    the target table. (Bug#23667)
2007-07-15 19:22:06 +00:00
xtraeme
934137f170 mysqld_precmd(): check if ${mysql_datadir}/mysql dir exists before
starting mysqld, otherwise if mysql_datadir has not been initialized
it will fail.

Patch from Edgar Fur via PR pkg/36138.
2007-06-13 13:24:07 +00:00
xtraeme
17385e04b4 Update to 5.0.41. Amongst many fixes these vulnerabilities were
fixed:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2583
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2692

And another patch adapted from a mailing list to fix:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2691

See http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-41.html
To see all changes.
2007-05-21 04:39:59 +00:00
adam
e7547647b6 Changes 5.0.37:
* Added the SHOW PROFILES and SHOW PROFILE statements to display statement
  profile data, and the accompanying INFORMATION_SCHEMA.PROFILING table.

* Added the Uptime_since_flush_status status variable, which indicates the
  number of seconds since the most recent FLUSH STATUS statement.

* Incompatible change in DATE_FORMAT().

* NDB Cluster: The LockPagesInMainMemory configuration parameter has changed
  its type and possible values.

* The bundled yaSSL library was upgraded to version 1.5.8.

* The --skip-thread-priority option now is enabled by default for binary Mac
  OS X distributions. Use of thread priorities degrades performance on Mac OS X.

* Added the --disable-grant-options option to configure.

* Bug fixes.
2007-03-11 18:42:27 +00:00
ghen
c7c7cc1107 rc.d usage can be found in NetBSD and pkgsrc documentation and is not mysql
specific.
2007-01-23 15:51:53 +00:00
rillig
2829e658f2 Mechanically replaced man/* with ${PKGMANDIR}/* in the definition of
INSTALLATION_DIRS, as well as all occurrences of ${PREFIX}/man with
${PREFIX}/${PKGMANDIR}.

Fixes PR 35265, although I did not use the patch provided therein.
2007-01-07 09:13:46 +00:00
xtraeme
7cbd0bb3ad Update to 5.0.27:
This is a bugfix release for the current production release family.

MySQL 5.0.26 introduced an ABI incompatibility, which this release
reverts. Programs compiled against 5.0.26 are not compatible with
any other version and must be recompiled.
2006-12-10 04:12:17 +00:00
xtraeme
12846e7b06 Update to the long awaited 5.0.26 release, codenamed "houston we have
a problem with vulnerabilities".

Please see the following URLs for changes:

http://dev.mysql.com/doc/refman/5.0/en/news-5-0-26.html
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html

Two patches were sent upstream, I hope to get them in the next version.
2006-10-14 18:41:34 +00:00
xtraeme
912bfebe97 Update mysql5-* to 5.0.24a.
This is a bugfix release for the current production release family.
It replaces MySQL 5.0.24.

Changes from 5.0.24 to 5.0.24a:

MySQL 5.0.24 introduced an ABI incompatibility, which this release reverts.
Programs compiled against 5.0.24 are not compatible with any other version
and must be recompiled.

Closing of temporary tables failed if binary logging was not enabled.

For statements that have a DEFINER clause such as CREATE TRIGGER or
CREATE VIEW, long usernames or hostnames could cause a buffer overflow.

Pathname separator and device characters were not correctly parameterized
for NetWare, causing mysqld startup errors.

mysqld could crash when closing temporary tables.
2006-09-02 12:32:12 +00:00
tron
e855b44068 Update "mysql5-client" and "mysql5-server" packages to version 5.0.24.
Changes since version 5.0.22:
- Security fix: If a user has access to MyISAM table t, that user can
  create a MERGE table m that accesses t. However, if the user's
  privileges on t are subsequently revoked, the user can continue to
  access t by doing so through m. If this behavior is undesirable, you
  can start the server with the new --skip-merge option to disable the
  MERGE storage engine. (Bug#15195)
- In the INFORMATION_SCHEMA.ROUTINES table the ROUTINE_DEFINITION
  column now is defined as NULL rather than NOT NULL. Also, NULL rather
  than the empty string is returned as the column value if the user does
  not have sufficient privileges to see the routine
  definition. (Bug#20230)
- Several other bug fixes
2006-08-06 16:30:40 +00:00
rillig
ff59a4c806 Fixed the path to the Perl interpreter in one file. Bumped PKGREVISION. 2006-07-12 11:56:05 +00:00
sketch
84d3809112 Solaris fixes:
- Pass appropriate flags to SunPro compiler to work with Solaris 9 and below
    for threading model used.

  - Pass one directory at a time to `install -d'.
2006-07-10 20:16:53 +00:00
tron
8b4d215e94 Update "mysql5-client" and "mysql5-server" packages to version 5.0.22.
This upgrade fixes the SQL injection vulnerability reported in SA20365.
2006-06-03 15:29:13 +00:00
cube
b81aea078a Update to version 5.0.21.
Full listing of changes:

http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html

Notable changes include:
 - Security enhancement: Added the global max_prepared_stmt_count system
   variable to limit the total number of prepared statements in the
   server.
 - The default for the innodb_thread_concurrency system variable was
   changed to 8.
 - Fixes for CVE-2006-1516, CVE-2006-1517 and CVE-2006-1518.

 And a lot of bug fixes.
2006-05-18 16:11:15 +00:00
jlam
802ce74fcb Modify packages that set PKG_USERS and PKG_GROUPS to follow the new
syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47.
2006-04-23 00:12:35 +00:00
tron
4b0687ec20 Add fix for CAN-2006-0903 taken from MySQL bug #17667. Bump package
revision because of this security fix.
2006-04-17 11:21:41 +00:00
xtraeme
2d6db16229 Update mysql5-* to 5.0.20.
To see new changes and bugs fixed, see:
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-x.html.
2006-04-13 11:19:25 +00:00
jlam
daad0f3d6c Modify the pkginstall framework so that it manages all aspects of
INSTALL/DEINSTALL script creation within pkgsrc.

If an INSTALL or DEINSTALL script is found in the package directory,
it is automatically used as a template for the pkginstall-generated
scripts.  If instead, they should be used simply as the full scripts,
then the package Makefile should set INSTALL_SRC or DEINSTALL_SRC
explicitly, e.g.:

	INSTALL_SRC=	${PKGDIR}/INSTALL
	DEINSTALL_SRC=	# emtpy

As part of the restructuring of the pkginstall framework internals,
we now *always* generate temporary INSTALL or DEINSTALL scripts.  By
comparing these temporary scripts with minimal INSTALL/DEINSTALL
scripts formed from only the base templates, we determine whether or
not the INSTALL/DEINSTALL scripts are actually needed by the package
(see the generate-install-scripts target in bsd.pkginstall.mk).

In addition, more variables in the framework have been made private.
The *_EXTRA_TMPL variables have been renamed to *_TEMPLATE, which are
more sensible names given the very few exported variables in this
framework.  The only public variables relating to the templates are:

	INSTALL_SRC		INSTALL_TEMPLATE
	DEINSTALL_SRC		DEINSTALL_TEMPLATE
				HEADER_TEMPLATE

The packages in pkgsrc have been modified to reflect the changes in
the pkginstall framework.
2006-03-14 01:14:26 +00:00
joerg
5911def816 Recursive revision bump / recommended bump for gettext ABI change. 2006-02-05 23:08:03 +00:00
xtraeme
c7cc54bf62 Update mysql5-{client,server} to 5.0.18.
Too many changes to list... more information via:
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-18.html
2006-01-09 16:25:01 +00:00
xtraeme
5604b85276 Don't install the extra header files, they are needed to build some
packages so they belong to mysql-client.

Bump PKGREVISION.
2006-01-08 17:43:58 +00:00
jlam
dc9594e09d Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mk
automatically detects whether we want the pkginstall machinery to be
used by the package Makefile.
2005-12-29 06:21:30 +00:00
rillig
579e977969 Ran "pkglint --autofix", which corrected some of the quoting issues in
CONFIGURE_ARGS.
2005-12-05 23:55:01 +00:00
rillig
b71a1d488b Fixed pkglint warnings. The warnings are mostly quoting issues, for
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some
other changes are outlined in

    http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-12-05 20:49:47 +00:00
xtraeme
dca19f677a Update to 5.0.16.
For information about changes please see:
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-16.html
2005-12-02 08:13:26 +00:00
xtraeme
32384a6653 Initial import of mysql5-server-5.0.15.
MySQL is a SQL (Structured Query Language) database server.  SQL is the
most popular database language in the world.  MySQL is a client-server
implementation that consists of a server daemon `mysqld' and many
different client programs/libraries.

The main goals of MySQL are speed and robustness.

The base upon which MySQL is built is a set of routines that have been
used in a highly demanding production environment for many years.  While
MySQL is still in development it already offers a rich and highly useful
function set.

The official way to pronounce 'MySQL' is 'My Ess Que Ell' (Not MY-SEQUEL).

This package contains the MySQL server programs and libraries.
2005-10-31 09:22:26 +00:00