head 1.4; access; symbols pkgsrc-2024Q2:1.3.0.10 pkgsrc-2024Q2-base:1.3 pkgsrc-2024Q1:1.3.0.8 pkgsrc-2024Q1-base:1.3 pkgsrc-2023Q4:1.3.0.6 pkgsrc-2023Q4-base:1.3 pkgsrc-2023Q3:1.3.0.4 pkgsrc-2023Q3-base:1.3 pkgsrc-2023Q2:1.3.0.2 pkgsrc-2023Q2-base:1.3 pkgsrc-2023Q1:1.2.0.34 pkgsrc-2023Q1-base:1.2 pkgsrc-2022Q4:1.2.0.32 pkgsrc-2022Q4-base:1.2 pkgsrc-2022Q3:1.2.0.30 pkgsrc-2022Q3-base:1.2 pkgsrc-2022Q2:1.2.0.28 pkgsrc-2022Q2-base:1.2 pkgsrc-2022Q1:1.2.0.26 pkgsrc-2022Q1-base:1.2 pkgsrc-2021Q4:1.2.0.24 pkgsrc-2021Q4-base:1.2 pkgsrc-2021Q3:1.2.0.22 pkgsrc-2021Q3-base:1.2 pkgsrc-2021Q2:1.2.0.20 pkgsrc-2021Q2-base:1.2 pkgsrc-2021Q1:1.2.0.18 pkgsrc-2021Q1-base:1.2 pkgsrc-2020Q4:1.2.0.16 pkgsrc-2020Q4-base:1.2 pkgsrc-2020Q3:1.2.0.14 pkgsrc-2020Q3-base:1.2 pkgsrc-2020Q2:1.2.0.12 pkgsrc-2020Q2-base:1.2 pkgsrc-2020Q1:1.2.0.8 pkgsrc-2020Q1-base:1.2 pkgsrc-2019Q4:1.2.0.10 pkgsrc-2019Q4-base:1.2 pkgsrc-2019Q3:1.2.0.6 pkgsrc-2019Q3-base:1.2 pkgsrc-2019Q2:1.2.0.4 pkgsrc-2019Q2-base:1.2 pkgsrc-2019Q1:1.2.0.2 pkgsrc-2019Q1-base:1.2 pkgsrc-2018Q4:1.1.0.22 pkgsrc-2018Q4-base:1.1 pkgsrc-2018Q3:1.1.0.20 pkgsrc-2018Q3-base:1.1 pkgsrc-2018Q2:1.1.0.18 pkgsrc-2018Q2-base:1.1 pkgsrc-2018Q1:1.1.0.16 pkgsrc-2018Q1-base:1.1 pkgsrc-2017Q4:1.1.0.14 pkgsrc-2017Q4-base:1.1 pkgsrc-2017Q3:1.1.0.12 pkgsrc-2017Q3-base:1.1 pkgsrc-2017Q2:1.1.0.8 pkgsrc-2017Q2-base:1.1 pkgsrc-2017Q1:1.1.0.6 pkgsrc-2017Q1-base:1.1 pkgsrc-2016Q4:1.1.0.4 pkgsrc-2016Q4-base:1.1 pkgsrc-2016Q3:1.1.0.2 pkgsrc-2016Q3-base:1.1; locks; strict; comment @# @; 1.4 date 2024.08.05.06.30.30; author wiz; state dead; branches; next 1.3; commitid bBHFyVW9uHUXcBkF; 1.3 date 2023.05.25.09.06.57; author adam; state Exp; branches; next 1.2; commitid PbsWAeFJ4CeV9kqE; 1.2 date 2019.01.20.18.22.10; author maya; state Exp; branches; next 1.1; commitid Y2oxnUKVtqBhdy8B; 1.1 date 2016.09.16.06.49.11; author adam; state Exp; branches 1.1.22.1; next ; commitid bzWTDZHvVHlQStmz; 1.1.22.1 date 2019.01.29.13.01.46; author bsiegert; state Exp; branches; next ; commitid Oc05OrnAapzs9G9B; desc @@ 1.4 log @mysql* 5.6, 5.7: remove As proposed on pkgsrc-users on July 26. These versions are unsupported by upstream since 2018 and 2020 respectively. @ text @$NetBSD: patch-CMakeLists.txt,v 1.3 2023/05/25 09:06:57 adam Exp $ Split configuration between mysql-client and mysql-server. Backport of https://github.com/mysql/mysql-server/commit/98ed3d8bc8ad724686d26c7bf98dced3bd1777be Avoid disclosure of files from a client to a malicious server, described here: https://gwillem.gitlab.io/2019/01/17/adminer-4.6.2-file-disclosure-vulnerability/ ndb is not available anymore. --- CMakeLists.txt.orig 2023-03-16 15:25:04.000000000 +0000 +++ CMakeLists.txt @@@@ -482,7 +482,7 @@@@ IF(REPRODUCIBLE_BUILD) ENDIF() OPTION(ENABLED_LOCAL_INFILE - "If we should enable LOAD DATA LOCAL by default" ${IF_WIN}) + "If we should enable LOAD DATA LOCAL by default" OFF) MARK_AS_ADVANCED(ENABLED_LOCAL_INFILE) OPTION(OPTIMIZER_TRACE "Support tracing of Optimizer" ON) @@@@ -702,7 +702,6 @@@@ ADD_SUBDIRECTORY(vio) ADD_SUBDIRECTORY(regex) ADD_SUBDIRECTORY(mysys) ADD_SUBDIRECTORY(mysys_ssl) -ADD_SUBDIRECTORY(libmysql) ADD_SUBDIRECTORY(libbinlogevents) ADD_SUBDIRECTORY(libbinlogstandalone) @@@@ -716,9 +715,6 @@@@ IF(NOT WITHOUT_SERVER) SET (MYSQLD_STATIC_EMBEDDED_PLUGIN_LIBS "" CACHE INTERNAL "") # Add storage engines and plugins. CONFIGURE_PLUGINS() -ELSE() - # We may still want Cluster client libraries, use -DWITH_NDBCLUSTER=1 - ADD_SUBDIRECTORY(storage/ndb) ENDIF() IF(WITH_UNIT_TESTS) @@@@ -745,12 +741,12 @@@@ ADD_SUBDIRECTORY(client) ADD_SUBDIRECTORY(sql/share) ADD_SUBDIRECTORY(libservices) -IF(UNIX) +IF(WITHOUT_SERVER) + ADD_SUBDIRECTORY(libmysql) ADD_SUBDIRECTORY(man) -ENDIF() - -IF(NOT WITHOUT_SERVER) ADD_SUBDIRECTORY(testclients) +ELSE() + ADD_SUBDIRECTORY(libmysql) ADD_SUBDIRECTORY(sql) OPTION (WITH_EMBEDDED_SERVER "Compile MySQL with embedded server" OFF) IF(WITH_EMBEDDED_SERVER) @ 1.3 log @mysql57: updated to 5.7.42 Changes in MySQL 5.7.42 Functionality Added or Changed Important Change: The linked OpenSSL library for MySQL Server has been updated to version 1.1.1t. Issues fixed in OpenSSL version 1.1.1t are described at https://www.openssl.org/news/cl111.txt. The linked curl library for MySQL Server (Enterprise Edition) has been updated to version 7.88.1. Bugs Fixed InnoDB: Prevent online DDL operations from accessing out-of-bounds memory. Replication: Some binary log events were not always handled correctly. Replication: Setting binlog_order_commits to OFF could lead to a missed GTID in the next binary log file's Previous_gtids event. Our thanks to Yewei Xu and the Tencent team for the contribution. A client setting the character set to an impermissible client character set (ucs2, utf16, utf16le, or utf32) could cause unexpected behavior when the client used an authentication plugin. The scope of the connect_timeout limit was extended to full-packet reads. Using --single-transaction with mysqldump version 5.7.41 required either the RELOAD or FLUSH_TABLES privilege. This requirement now applies only when both gtid_mode=ON (default OFF) and with --set-gtid-purged = ON|AUTO (default AUTO). @ text @d1 1 a1 1 $NetBSD: patch-CMakeLists.txt,v 1.2 2019/01/20 18:22:10 maya Exp $ @ 1.2 log @mysql57-client: change the default configuration to avoid information disclosure to a malicious server. Backport of upstream commit: https://github.com/mysql/mysql-server/commit/98ed3d8bc8ad724686d26c7bf98dced3bd1777be Exploit method described here: https://gwillem.gitlab.io/2019/01/17/adminer-4.6.2-file-disclosure-vulnerability/ @ text @d1 1 a1 1 $NetBSD: patch-CMakeLists.txt,v 1.1 2016/09/16 06:49:11 adam Exp $ d9 3 a11 1 --- CMakeLists.txt.orig 2018-10-04 05:48:22.000000000 +0000 d13 1 a13 1 @@@@ -408,7 +408,7 @@@@ IF(REPRODUCIBLE_BUILD) d22 1 a22 1 @@@@ -636,7 +636,6 @@@@ ADD_SUBDIRECTORY(vio) d30 11 a40 1 @@@@ -674,12 +673,12 @@@@ ADD_SUBDIRECTORY(client) @ 1.1 log @MySQL is a SQL (Structured Query Language) database server. SQL is the most popular database language in the world. MySQL is a client-server implementation that consists of a server daemon `mysqld' and many different client programs/libraries. The main goals of MySQL are speed and robustness. The base upon which MySQL is built is a set of routines that have been used in a highly demanding production environment for many years. While MySQL is still in development it already offers a rich and highly useful function set. @ text @d1 1 a1 1 $NetBSD$ d5 5 a9 1 --- CMakeLists.txt.orig 2016-06-30 06:22:11.000000000 +0000 d11 10 a20 1 @@@@ -584,7 +584,6 @@@@ ADD_SUBDIRECTORY(vio) d28 1 a28 1 @@@@ -613,12 +612,12 @@@@ ADD_SUBDIRECTORY(client) @ 1.1.22.1 log @Pullup ticket #5900 - requested by maya databases/mysql55-client: security fix databases/mysql56-client: security fix databases/mysql57-client: security fix Revisions pulled up: - databases/mysql55-client/Makefile 1.32 - databases/mysql55-client/distinfo 1.63 - databases/mysql55-client/patches/patch-CMakeLists.txt 1.7 - databases/mysql55-client/patches/patch-cmake_build__configurations_mysql__release.cmake 1.1 - databases/mysql55-client/patches/patch-sql_sys__vars.cc 1.1 - databases/mysql56-client/Makefile 1.28 - databases/mysql56-client/distinfo 1.49 - databases/mysql56-client/patches/patch-CMakeLists.txt 1.6 - databases/mysql56-client/patches/patch-cmake_build__configurations_mysql__release.cmake 1.1 - databases/mysql56-client/patches/patch-sql_sys__vars.cc 1.3 - databases/mysql57-client/Makefile 1.19 - databases/mysql57-client/distinfo 1.27 - databases/mysql57-client/patches/patch-CMakeLists.txt 1.2 - databases/mysql57-client/patches/patch-cmake_build__configurations_mysql__release.cmake 1.1 - databases/mysql57-client/patches/patch-sql_sys__vars.cc 1.1 --- Module Name: pkgsrc Committed By: maya Date: Sun Jan 20 18:03:25 UTC 2019 Modified Files: pkgsrc/databases/mysql55-client: Makefile distinfo pkgsrc/databases/mysql55-client/patches: patch-CMakeLists.txt Added Files: pkgsrc/databases/mysql55-client/patches: patch-cmake_build__configurations_mysql__release.cmake patch-sql_sys__vars.cc Log Message: mysql55-client: change the default configuration to avoid information disclosure to a malicious server. Backport of upstream commit: https://github.com/mysql/mysql-server/commit/98ed3d8bc8ad724686d26c7bf98dced3bd1777be Exploit method described here: https://gwillem.gitlab.io/2019/01/17/adminer-4.6.2-file-disclosure-vulnerability/ --- Module Name: pkgsrc Committed By: maya Date: Sun Jan 20 18:04:49 UTC 2019 Modified Files: pkgsrc/databases/mysql56-client: Makefile distinfo pkgsrc/databases/mysql56-client/patches: patch-CMakeLists.txt Added Files: pkgsrc/databases/mysql56-client/patches: patch-cmake_build__configurations_mysql__release.cmake patch-sql_sys__vars.cc Log Message: mysql56-client: change the default configuration to avoid information disclosure to a malicious server. Backport of upstream commit: https://github.com/mysql/mysql-server/commit/98ed3d8bc8ad724686d26c7bf98dced3bd1777be Exploit method described here: https://gwillem.gitlab.io/2019/01/17/adminer-4.6.2-file-disclosure-vulnerability/ --- Module Name: pkgsrc Committed By: maya Date: Sun Jan 20 18:22:10 UTC 2019 Modified Files: pkgsrc/databases/mysql57-client: Makefile distinfo pkgsrc/databases/mysql57-client/patches: patch-CMakeLists.txt Added Files: pkgsrc/databases/mysql57-client/patches: patch-cmake_build__configurations_mysql__release.cmake patch-sql_sys__vars.cc Log Message: mysql57-client: change the default configuration to avoid information disclosure to a malicious server. Backport of upstream commit: https://github.com/mysql/mysql-server/commit/98ed3d8bc8ad724686d26c7bf98dced3bd1777be Exploit method described here: https://gwillem.gitlab.io/2019/01/17/adminer-4.6.2-file-disclosure-vulnerability/ @ text @d5 1 a5 5 Backport of https://github.com/mysql/mysql-server/commit/98ed3d8bc8ad724686d26c7bf98dced3bd1777be Avoid disclosure of files from a client to a malicious server, described here: https://gwillem.gitlab.io/2019/01/17/adminer-4.6.2-file-disclosure-vulnerability/ --- CMakeLists.txt.orig 2018-10-04 05:48:22.000000000 +0000 d7 1 a7 10 @@@@ -408,7 +408,7 @@@@ IF(REPRODUCIBLE_BUILD) ENDIF() OPTION(ENABLED_LOCAL_INFILE - "If we should enable LOAD DATA LOCAL by default" ${IF_WIN}) + "If we should enable LOAD DATA LOCAL by default" OFF) MARK_AS_ADVANCED(ENABLED_LOCAL_INFILE) OPTION(OPTIMIZER_TRACE "Support tracing of Optimizer" ON) @@@@ -636,7 +636,6 @@@@ ADD_SUBDIRECTORY(vio) d15 1 a15 1 @@@@ -674,12 +673,12 @@@@ ADD_SUBDIRECTORY(client) @