mysql (3.23.49-8.14) oldstable-security; urgency=high * Non-maintainer upload by the Security Team * Applied maintainer patch to fix buffer overflow in CREATE FUNCTION [sql/sql_udf.cc, debian/patches/SECURITY__CAN-2005-2558_create_function.diff] -- Martin Schulze Fri, 16 Sep 2005 08:34:47 +0200 mysql (3.23.49-8.13) stable; urgency=high * In the corner case that someone upgrades from woody's version of mysql-server to mysql-server-4.1, and they have the mysql datadir or mysql logdir symlinked to somewhere else, the symlink would be lost. this no longer happens, by having copies of the symlinks being stored (in non-purge removals) in a directory where 4.1 will look for them. * 8.12 was never uploaded, so this version will also address the breakage by the previous security update. -- sean finney Fri, 20 May 2005 19:35:56 -0400 mysql (3.23.49-8.12) stable-security; urgency=high * Fix for breakagee in the last security update (CAN-2005-0709,0710,0711), where some database types would fail delete and truncate operations due to the unnecessary use of the O_EXCL flag in the patched functions. -- sean finney Wed, 4 May 2005 02:45:42 +0000 mysql (3.23.49-8.11) stable-security; urgency=high * Non-maintainer upload by the Security Team * Added important fix digged out by Tom Lane for the patch below that will initialise a variable [sql/ha_myisam.cc, debian/patches/SECURITY__CAN-2005-0709,0710,0711.diff] -- Martin Schulze Wed, 6 Apr 2005 12:14:40 +0200 mysql (3.23.49-8.10) stable-security; urgency=low * Maintainer prepared version, uploaded by the Security Team. * Applied patch for a bug that wrongly interpreted '_' in conjunction with the GRANT PRIVILEGES command as wildcard instead as literal character giving an unprivileged mysql user the possibility to grant himself rights on tables he has no privileges on. [CAN-2004-0957, http://bugs.mysql.com/3933] (Thanks to Sean Finney for creating the patch from the RedHat backporting and the MySQL bitkeeper changeset). Closes: #285276, #296674 * Stefano Di Paola found the following vulnerabilities: - Remote authenticated users with INSERT and DELETE privileges could execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated byusing strcat, on_exit, and exit. [CAN-2005-0709] - Remote authenticated users with INSERT and DELETE privileges could bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function. [CAN-2005-0710] - Predictable file names were used when creating temporary tables, which allowed local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack. [CAN-2005-0711] Closes: #300158 -- Christian Hammers Fri, 18 Mar 2005 01:34:24 +0100 mysql (3.23.49-8.9) stable-security; urgency=high * Maintainer upload for the Security Team * Javier Fernandez-Sanguino Pena from the Debian Security Audit Project found a /tmp symlink vulnerability in the mysqlaccess script that could allow an unprivileged user to let root overwrite arbitrary files without his knowledge and also could unveil the contents of a temporary file which might contain sensitive information. [scripts/mysqlaccess.sh, CAN-2005-0004] * Added older security patches to debian/patches for reference -- Christian Hammers Thu, 13 Jan 2005 02:50:21 +0100 mysql (3.23.49-8.8) stable-security; urgency=high * Maintainer upload by the Security Team * Applied patch to make mysqlhotcopy working again as it was broken by the upstream patch for the security problem fixed in 3.23.49-8.7 [DSA 540 and CAN-2004-0457] * Applied patch to fix a minor privilege escalation possibility in the "ALTER TABLE ... RENAME" command. [http://bugs.mysql.com/3270, CAN-2004-0835] * Applied patch to fix a potential memory overrun in mysql_real_connect() (which required a compromised DNS server and certain operating systems). [http://bugs.mysql.com/4017, CAN-2004-0836] * Applied patch to fix a bug that could have resulted in a crash or hang of the server if concurrent accesses to MERGE tables (even one MERGE table and MyISAM tables) were used, [http://bugs.mysql.com/2408, CAN-2004-0837] -- Christian Hammers Sat, 2 Oct 2004 20:41:09 +0200 mysql (3.23.49-8.7) stable-security; urgency=high * Non-maintainer upload by the Security Team * Applied upstream patch by Sergei Golubchik to fix insecure temporary file creation [scripts/mysqlhotcopy.sh, http://lists.mysql.com/internals/15185, CAN-2004-0457] -- Martin Schulze Sat, 14 Aug 2004 17:24:09 +0200 mysql (3.23.49-8.6) stable-security; urgency=high * Non-maintainer upload by the Security Team * Applied upstream patch to fix insecure temporary file creation [scripts/mysqlbug.sh, CAN-2004-0381, Bugtraq ID 9976] * Corrected another insecure temporary file creation [scripts/mysqld_multi.sh] * Removed the mysql-doc package since the same exists in non-free with a higher version number which would cause this update to be rejected. -- Martin Schulze Tue, 6 Apr 2004 08:29:27 +0200 mysql (3.23.49-8.5) stable-security; urgency=high * Non-maintainer upload by the Security Team * Apply patch from BTS to fix an overflow where the 'password' column in the user table is longer than 16 characters (CAN-2003-0780, #210403) -- Matt Zimmerman Thu, 11 Sep 2003 18:33:34 -0400 mysql (3.23.49-8.4) stable-security; urgency=high * Non-maintainer upload by the Security Team * Create /var/lib/mysql/my.cnf in postinst so that it cannot be created maliciously in order to cause mysqld to be started as root * CAN-2003-0150 -- Matt Zimmerman Wed, 7 May 2003 19:18:49 -0400 mysql (3.23.49-8.3) stable-security; urgency=high * Non-maintainer upload by the Security Team * Avoid double-free in COM_CHANGE_USER (mysql_change_user()) [sql/sql_parse.cc] * CAN-2003-0073 -- Matt Zimmerman Sat, 3 May 2003 22:56:10 -0400 mysql (3.23.49-8.2) stable-security; urgency=high * Non-maintainer upload by security team * Add missing patch for signedness problem -- Wichert Akkerman Mon, 16 Dec 2002 13:18:31 +0100 mysql (3.23.49-8.1) stable-security; urgency=high * Non-maintainer upload by security team * Fix several security problems as found by e-matters -- Wichert Akkerman Thu, 12 Dec 2002 19:11:37 +0100 mysql (3.23.49-8) unstable; urgency=low * Substituted $0 in init script to let e.g. "/etc# ./init.d/mysql restart" works, too. Closes: #141555 -- Christian Hammers Sun, 7 Apr 2002 15:00:44 +0200 mysql (3.23.49-7) unstable; urgency=low * The Makefiles are totally broken for the --enable-local-infile option. I now patched libmysql/libmysql.c#mysql_init() manually. Closes: #138347 -- Christian Hammers Fri, 29 Mar 2002 23:55:15 +0100 mysql (3.23.49-6) unstable; urgency=low * Moved mysqlcheck from server to client package. Closes: #139799 * Added manpage for mysqlhotcopy. Regarding: #87097 * Added 'sharedscripts' directive to the logrotate script. * Replaced grep by /usr/bin/getent to let the group/user checking work on NIS/LDAP systems, too. Closes: #115677, #101529 -- Christian Hammers Fri, 22 Mar 2002 22:40:51 +0100 mysql (3.23.49-5) unstable; urgency=low * Added skip-innodb to default my.cnf. * Enabled --enable-local-infile, it seems to be a new option that defaults to disable a formerly enabled feaure. Closes: #137115 -- Christian Hammers Sat, 16 Mar 2002 00:29:10 +0100 mysql (3.23.49-4) unstable; urgency=medium * Recompiled against fixed libz. * Enabled --enable-local-infile, it seems to be a new option that defaults to disable a formerly enabled feaure. Closes: #137115 * Fixed README.compile_on_potato. Closes: #136529 * Now a ext3 .jounal file in /var/lib/mysql does not prevent the installation (happens when creating a jounal on an already mounted partition). Closes: #137146 -- Christian Hammers Wed, 13 Mar 2002 13:34:24 +0100 mysql (3.23.49-3) unstable; urgency=low * Added Russian translation. Closes: #135846 * Fixed installation of .info documents. Closes: #135030 -- Christian Hammers Wed, 27 Feb 2002 23:36:35 +0100 mysql (3.23.49-2) unstable; urgency=low * Updated french translation and split template files. Closes: #134754 * Fixed a small debian.cnf related bug in mysql-server.postinst. -- Christian Hammers Tue, 19 Feb 2002 23:13:58 +0100 mysql (3.23.49-1) unstable; urgency=low * New upstream release. (Mainly InnoDB related fixes) * Exported a $HOME variable in the scripts so that /root/.my.cnf is not read anymore. This will avoid problems when admins put only passwords but no usernames in this file. Closes: #132048 * New debian-sys-maint password algorithm (now ~96bit :-)) Closes: #133863 * Recreating debian-sys-main pwd on every install to help people who accidently delete user or password files... * Added /var/log/mysql so that user can put the binary logs in there as mysql cannot write the .001 etc files itself in /var/log which is owned by root. -- Christian Hammers Thu, 14 Feb 2002 22:17:45 +0100 mysql (3.23.47-6) unstable; urgency=low * Dropped a sentence about the new debian-sys-maint user in the debconf note and updated the README.Debian. Related: #132048 * Added more french translation. Closes: #132390 -- Christian Hammers Wed, 6 Feb 2002 09:41:29 +0100 mysql (3.23.47-5) unstable; urgency=low * Fixed grammar error in template. Closes: #132238 * Really fixed typo in logrotate script. Closes: #131711 -- Christian Hammers Tue, 5 Feb 2002 14:20:08 +0100 mysql (3.23.47-4) unstable; urgency=medium * Fixes typo in postinst that let init script fail. Closes: #131743 * Fixed bashism bug that failed on ash. Closes: #131697 * Fixed typo in logrotate script. Closes: #131711 -- Christian Hammers Thu, 31 Jan 2002 23:58:46 +0100 mysql (3.23.47-3) unstable; urgency=low * Added new Debian specific mysql user called 'debian-sys-maint' which is used for pinging the server status, flushing the logs or shutting down the server in maintenance scripts. The credentials of this user are stored in the UID0-only readable file /etc/mysql/debian.cnf. Closes: #129887, #130326, #99274 * Fixed unintended server startup at boottime. Closes: #122676, #130105 * New upstream fixes command line parsing bug: Closes: #128473 * Fixed manpage headers to let apropos work: Closes: #119122 * Added "status" options for /etc/init.d/mysql. Closes: #129020 -- Christian Hammers Sun, 27 Jan 2002 19:46:11 +0100 mysql (3.23.47-2) unstable; urgency=low * Enhanced init scripts by using mysqladmin instead of kill $pid. Thanks to Aaron Brick. -- Christian Hammers Fri, 18 Jan 2002 01:42:23 +0100 mysql (3.23.47-1) unstable; urgency=low * New upstream release. * Updated brazilian translation of debconf descriptions. Closes: #123332 -- Christian Hammers Sun, 6 Jan 2002 21:11:17 +0100 mysql (3.23.46-3) unstable; urgency=low * Fixed bug in postinst where a script was accidently called with "bash -c