Branches for Feisty

Author: Martin Pitt
Revision Date: 2007-04-03 09:43:01 UTC

* Package the Enterprise version again (.37 was a community version), since
  Debian and we have always done so. This brings in a few more bug fixes and
  makes functional derivations less likely.
* debian/README.Maintainer: Add pointer to upstream download URL, since it
  is very hard to find the Enterprise versions.
* Disable 33_scripts__mysql_create_system_tables__no_test.dpatch, since that
  script was removed upstream.
* debian/patches/41_scripts__mysql_install_db.sh__no_test.dpatch: Adapted to
  changed formatting in new upstream version.
* Remove debian/patches/86_PATH_MAX.dpatch, fixed upstream.
* Add debian/patches/90_org_tables_definition.dpatch: Fix local variable
  declaration in libmysqld/sql_parse.cc to fix compilation with
  EMBEDDED_LIBRARY.

Author: Jamie Strandboge
Revision Date: 2008-03-06 09:15:54 UTC

* SECURITY UPDATE: buffer overflow via ProcessOldClientHello() in
  handshake.cpp and input_buffer& operator>> in yassl_imp.cpp
* SECURITY UPDATE: buffer overread in HASHwithTransform::Update in hash.cpp
* debian/patches/97_SECURITY_CVE-2008-0226_0227.dpatch: properly verify
  length of input (LP: #186978).
* SECURITY UPDATE: privilege escalation via crafted CREATE SQL SECURITY
  DEFINER VIEW and ALTER VIEW statements
* debian/patches/98_SECURITY_CVE-2007-6303.dpatch: make sure lex->definer
  is non-NULL in sql_view.cc (LP: #185039)
* debian/patches/99_view_fix-now.dpatch: update view.test and view.result to
  use a static year instead of now(). These tests are not part of the build
  but helps with qa-regression-testing
* SECURITY UPDATE: privilege escalation via SQL SECURITY INVOKER stored
  routines
* debian/patches/100_SECURITY_CVE-2007-2692.dpatch: restore THD::db_access
  when returning from stored routine by performing privilege checks in the
  execution stage rather than the parsing stage. (LP: #172260)
* References
  CVE-2008-0226
  CVE-2008-0227
  CVE-2007-6303
  CVE-2007-2692
  http://bugs.mysql.com/bug.php?id=27337

Author: Jamie Strandboge
Revision Date: 2008-03-19 15:17:20 UTC

no change build for -security upload

Author: Jamie Strandboge
Revision Date: 2008-03-19 15:17:20 UTC

no change build for -security upload