head 1.3; access; symbols pkgsrc-2013Q2:1.3.0.24 pkgsrc-2013Q2-base:1.3 pkgsrc-2012Q4:1.3.0.22 pkgsrc-2012Q4-base:1.3 pkgsrc-2011Q4:1.3.0.20 pkgsrc-2011Q4-base:1.3 pkgsrc-2011Q2:1.3.0.18 pkgsrc-2011Q2-base:1.3 pkgsrc-2009Q4:1.3.0.16 pkgsrc-2009Q4-base:1.3 pkgsrc-2008Q4:1.3.0.14 pkgsrc-2008Q4-base:1.3 pkgsrc-2008Q3:1.3.0.12 pkgsrc-2008Q3-base:1.3 cube-native-xorg:1.3.0.10 cube-native-xorg-base:1.3 pkgsrc-2008Q2:1.3.0.8 pkgsrc-2008Q2-base:1.3 pkgsrc-2008Q1:1.3.0.6 pkgsrc-2008Q1-base:1.3 pkgsrc-2007Q4:1.3.0.4 pkgsrc-2007Q4-base:1.3 pkgsrc-2007Q3:1.3.0.2 pkgsrc-2007Q3-base:1.3 pkgsrc-2007Q2:1.2.0.4 pkgsrc-2007Q2-base:1.2 pkgsrc-2007Q1:1.2.0.2 pkgsrc-2007Q1-base:1.2 pkgsrc-2006Q4:1.1.0.8 pkgsrc-2006Q4-base:1.1 pkgsrc-2006Q3:1.1.0.6 pkgsrc-2006Q3-base:1.1 pkgsrc-2006Q2:1.1.0.4 pkgsrc-2006Q2-base:1.1 pkgsrc-2006Q1:1.1.0.2; locks; strict; comment @# @; 1.3 date 2007.07.15.19.22.07; author tron; state dead; branches; next 1.2; 1.2 date 2007.03.11.18.42.50; author adam; state Exp; branches 1.2.4.1; next 1.1; 1.1 date 2006.04.17.11.21.41; author tron; state Exp; branches 1.1.2.1; next ; 1.2.4.1 date 2007.07.28.16.46.40; author ghen; state dead; branches; next ; 1.1.2.1 date 2006.04.17.11.21.41; author salo; state dead; branches; next 1.1.2.2; 1.1.2.2 date 2006.04.17.21.58.38; author salo; state Exp; branches; next ; desc @@ 1.3 log @Update "mysql5-client" and "mysql5-server" packages to version 5.0.45. Change since version 5.0.41: - Functionality added or changed: - A new status variable, Com_call_procedure, indicates the number of calls to stored procedures. (Bug#27994) - NDB Cluster: The server source tree now includes scripts to simplify building MySQL with SCI support. For more information about SCI interconnects and these build scripts, see Section 15.9.1, Configuring MySQL Cluster to use SCI Sockets. (Bug#25470) - Prior to this release, when DATE values were compared with DATETIME values the time portion of the DATETIME value was ignored. Now a DATE value is coerced to the DATETIME type by adding the time portion as 00:00:00. To mimic the old behavior use the CAST() function in the following way: SELECT date_field = CAST(NOW() as DATE);. (Bug#28929) - A large number of bugs including these security problems have been fixed: - A malformed password packet in the connection protocol could cause the server to crash. Thanks for Dormando for reporting this bug and providing details and a proof of concept. (Bug#28984) - CREATE TABLE LIKE did not require any privileges on the source table. Now it requires the SELECT privilege. (Bug#25578) - In addition, CREATE TABLE LIKE was not isolated from alteration by other connections, which resulted in various errors and incorrect binary log order when trying to execute concurrently a CREATE TABLE LIKE statement and either DDL statements on the source table or DML or DDL statements on the target table. (Bug#23667) @ text @$NetBSD: patch-ao,v 1.2 2007/03/11 18:42:50 adam Exp $ --- sql/sql_lex.cc.orig 2007-03-05 20:21:11.000000000 +0100 +++ sql/sql_lex.cc @@@@ -931,6 +931,9 @@@@ int MYSQLlex(void *arg, void *yythd) while (lex->ptr != lex->end_of_query && ((c=yyGet()) != '*' || yyPeek() != '/')) { + if (c == '\0') + return(ABORT_SYM); // NULLs illegal even in comments + if (c == '\n') lex->yylineno++; } @ 1.2 log @Changes 5.0.37: * Added the SHOW PROFILES and SHOW PROFILE statements to display statement profile data, and the accompanying INFORMATION_SCHEMA.PROFILING table. * Added the Uptime_since_flush_status status variable, which indicates the number of seconds since the most recent FLUSH STATUS statement. * Incompatible change in DATE_FORMAT(). * NDB Cluster: The LockPagesInMainMemory configuration parameter has changed its type and possible values. * The bundled yaSSL library was upgraded to version 1.5.8. * The --skip-thread-priority option now is enabled by default for binary Mac OS X distributions. Use of thread priorities degrades performance on Mac OS X. * Added the --disable-grant-options option to configure. * Bug fixes. @ text @d1 1 a1 1 $NetBSD$ @ 1.2.4.1 log @Pullup ticket 2146 - requested by tron security update for mysql5 - pkgsrc/databases/mysql5-client/Makefile.common 1.25 - pkgsrc/databases/mysql5-client/PLIST 1.7 - pkgsrc/databases/mysql5-client/distinfo 1.19 - pkgsrc/databases/mysql5-client/patches/patch-ac removed - pkgsrc/databases/mysql5-client/patches/patch-ad 1.6 - pkgsrc/databases/mysql5-client/patches/patch-ae 1.9 - pkgsrc/databases/mysql5-client/patches/patch-bg removed - pkgsrc/databases/mysql5-server/PLIST 1.11 - pkgsrc/databases/mysql5-server/distinfo 1.16 - pkgsrc/databases/mysql5-server/patches/patch-aa 1.5 - pkgsrc/databases/mysql5-server/patches/patch-ac removed - pkgsrc/databases/mysql5-server/patches/patch-ah 1.6 - pkgsrc/databases/mysql5-server/patches/patch-ao removed Module Name: pkgsrc Committed By: tron Date: Sun Jul 15 19:22:07 UTC 2007 Modified Files: pkgsrc/databases/mysql5-client: Makefile.common PLIST distinfo pkgsrc/databases/mysql5-client/patches: patch-ad patch-ae pkgsrc/databases/mysql5-server: PLIST distinfo pkgsrc/databases/mysql5-server/patches: patch-aa patch-ah Removed Files: pkgsrc/databases/mysql5-client/patches: patch-ac patch-bg pkgsrc/databases/mysql5-server/patches: patch-ac patch-ao Log Message: Update "mysql5-client" and "mysql5-server" packages to version 5.0.45. Change since version 5.0.41: - Functionality added or changed: - A new status variable, Com_call_procedure, indicates the number of calls to stored procedures. (Bug#27994) - NDB Cluster: The server source tree now includes scripts to simplify building MySQL with SCI support. For more information about SCI interconnects and these build scripts, see Section 15.9.1, Configuring MySQL Cluster to use SCI Sockets. (Bug#25470) - Prior to this release, when DATE values were compared with DATETIME values the time portion of the DATETIME value was ignored. Now a DATE value is coerced to the DATETIME type by adding the time portion as 00:00:00. To mimic the old behavior use the CAST() function in the following way: SELECT date_field = CAST(NOW() as DATE);. (Bug#28929) - A large number of bugs including these security problems have been fixed: - A malformed password packet in the connection protocol could cause the server to crash. Thanks for Dormando for reporting this bug and providing details and a proof of concept. (Bug#28984) - CREATE TABLE LIKE did not require any privileges on the source table. Now it requires the SELECT privilege. (Bug#25578) - In addition, CREATE TABLE LIKE was not isolated from alteration by other connections, which resulted in various errors and incorrect binary log order when trying to execute concurrently a CREATE TABLE LIKE statement and either DDL statements on the source table or DML or DDL statements on the target table. (Bug#23667) @ text @d1 1 a1 1 $NetBSD: patch-ao,v 1.2 2007/03/11 18:42:50 adam Exp $ @ 1.1 log @Add fix for CAN-2006-0903 taken from MySQL bug #17667. Bump package revision because of this security fix. @ text @d3 3 a5 3 --- sql/sql_lex.cc.orig 2006-03-31 18:10:45.000000000 +0100 +++ sql/sql_lex.cc 2006-04-17 12:09:26.000000000 +0100 @@@@ -960,6 +960,9 @@@@ @ 1.1.2.1 log @file patch-ao was added on branch pkgsrc-2006Q1 on 2006-04-17 11:21:41 +0000 @ text @d1 14 @ 1.1.2.2 log @Pullup ticket 1399 - requested by xtraeme security update for mysql5 Revisions pulled up: - pkgsrc/databases/mysql5-client/Makefile 1.7 - pkgsrc/databases/mysql5-client/Makefile.common 1.10 - pkgsrc/databases/mysql5-client/PLIST 1.4 - pkgsrc/databases/mysql5-client/distinfo 1.5 - pkgsrc/databases/mysql5-client/patches/patch-ae 1.4 - pkgsrc/databases/mysql5-server/PLIST 1.5 - pkgsrc/databases/mysql5-server/distinfo 1.5, 1.6 - pkgsrc/databases/mysql5-server/patches/patch-ao 1.1 Module Name: pkgsrc Committed By: xtraeme Date: Thu Apr 13 11:19:25 UTC 2006 Modified Files: pkgsrc/databases/mysql5-client: Makefile Makefile.common PLIST distinfo pkgsrc/databases/mysql5-client/patches: patch-ae pkgsrc/databases/mysql5-server: PLIST distinfo Log Message: Update mysql5-* to 5.0.20. To see new changes and bugs fixed, see: http://dev.mysql.com/doc/refman/5.0/en/news-5-0-x.html. --- Module Name: pkgsrc Committed By: tron Date: Mon Apr 17 11:21:41 UTC 2006 Modified Files: pkgsrc/databases/mysql5-server: distinfo Added Files: pkgsrc/databases/mysql5-server/patches: patch-ao Log Message: Add fix for CAN-2006-0903 taken from MySQL bug #17667. Bump package revision because of this security fix. @ text @a0 14 $NetBSD: patch-ao,v 1.1.2.1 2006/04/17 21:58:38 salo Exp $ --- sql/sql_lex.cc.orig 2006-03-31 18:10:45.000000000 +0100 +++ sql/sql_lex.cc 2006-04-17 12:09:26.000000000 +0100 @@@@ -960,6 +960,9 @@@@ while (lex->ptr != lex->end_of_query && ((c=yyGet()) != '*' || yyPeek() != '/')) { + if (c == '\0') + return(ABORT_SYM); // NULLs illegal even in comments + if (c == '\n') lex->yylineno++; } @