lp://staging/ubuntu/hardy-security/mysql-dfsg-5.0

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

44. By Marc Deslauriers on 2012-06-11

* SECURITY UPDATE: authentication bypass (LP: #1011371)
  - debian/patches/90_CVE-2012-2122.patch: fix improper type conversion
    in sql/password.c.
  - CVE-2012-2122
* debian/mysql-server.preinst: Removed to prevent service from remaining
  stopped after getting updated. The upgrade logic is still present in
  mysql-common.preinst. (LP: #988325)

43. By Marc Deslauriers on 2012-03-28

* SECURITY UPDATE: Update to 5.0.96 to fix security issues (LP: #965523)
  - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-96.html

42. By Marc Deslauriers on 2012-02-23

* SECURITY UPDATE: Update to 5.0.95 to fix multiple security issues
  (LP: #937869)
  - http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  - CVE-2012-0075
  - CVE-2012-0087
  - CVE-2012-0101
  - CVE-2012-0102
  - CVE-2012-0114
  - CVE-2012-0484
  - CVE-2012-0490
* Dropped patches unnecessary with 5.0.95:
  - debian/patches/91_SECURITY_CVE-2007-5925.dpatch
  - debian/patches/95_SECURITY_CVE-2008-3963.dpatch
  - debian/patches/96_SECURITY_CVE-2008-4098.dpatch
  - debian/patches/97_CVE-2008-4456.dpatch
  - debian/patches/97_CVE-2009-2446.dpatch
  - debian/patches/97_CVE-2009-4019.dpatch
  - debian/patches/97_CVE-2009-4030.dpatch
  - debian/patches/98_CVE-2009-4484.dpatch
  - debian/patches/99_ssl_test_certs.dpatch
  - debian/patches/100_CVE-2010-1850.dpatch
  - debian/patches/101_CVE-2010-1849.dpatch
  - debian/patches/102_CVE-2010-1848.dpatch
  - debian/patches/103_CVE-2010-1626.dpatch
  - debian/patches/98_CVE-2010-3677.dpatch
  - debian/patches/98_CVE-2010-3680.dpatch
  - debian/patches/98_CVE-2010-3681.dpatch
  - debian/patches/98_CVE-2010-3682.dpatch
  - debian/patches/98_CVE-2010-3833.dpatch
  - debian/patches/98_CVE-2010-3834.dpatch
  - debian/patches/98_CVE-2010-3835.dpatch
  - debian/patches/98_CVE-2010-3836.dpatch
  - debian/patches/98_CVE-2010-3837.dpatch
  - debian/patches/98_CVE-2010-3838.dpatch
  - debian/patches/98_CVE-2010-3840.dpatch
  - debian/patches/45_warn-CLI-passwords.dpatch
  - debian/patches/50_fix_mysqldump.dpatch
  - debian/patches/51_incorrect-order.dpatch
  - debian/patches/52_ndb-gcc-4.2.dpatch
  - debian/patches/53_integer-gcc-4.2.dpatch
  - debian/patches/54_ssl-client-support.dpatch
  - debian/patches/55_testsuite-2008.dpatch
  - debian/patches/58-disable-ndb-backup-print.dpatch
  - debian/patches/59-fix-mysql-replication-logs.dpatch
  - debian/patches/86_PATH_MAX.dpatch
  - debian/patches/90_upstreamdebiandir.dpatch
  - debian/patches/92_fix_order_by32202.dpatch
  - debian/patches/93_fix_user_setup_on_localhost.dpatch
  - debian/patches/94_fix_mysqldump_with_old_versions.dpatch
  - debian/patches/56-mysqlhotcopy-invalid-dbtable.dpatch
  - debian/patches/57-fix-mysqlslowdump-config.dpatch
* debian/mysql-client-5.0.docs, debian/mysql-server-5.0.docs: removed
  EXCEPTIONS-CLIENT file
* debian/libmysqlclient15-dev.docs, debian/libmysqlclient15off.docs:
  removed, no longer necessary.
* debian/patches/25_mysys__default.c.dpatch: updated for 5.0.95.
* debian/mysql-server-5.0.files: change ndb_mgmd and ndbd manpage
  locations. Removed mysqlmanagerc.1 and mysqlmanager-pwgen.1

41. By Chuck Short on 2008-09-10

debian/patches/94_fix_mysqldump_with_old_versions.dpatch: Fixes mysqldump
when dumping a database from mysql 4.1. (LP: #267696)

40. By Steve Langasek on 2008-07-09

Add a Conflicts/Replaces on mysql-client-4.1 and mysql-server-4.1,
to ensure smooth upgrades for users of Ubuntu 6.06 that may still
have these universe packages installed. LP: #208695.

39. By Chuck Short on 2008-04-29

* debian/patches/93_fix_user_setup_on_localhost.dpatch
  - Fix setup of user table, if hostname is "localhost". Thanks
    to Daniel Hahler (LP: #223836)
* debian/patches/56-mysqlhotcopy-invalid-dbtable.dpatch
  - Update patch to address mysqlhotcopy issues. (LP: #197606)

38. By Mathias Gug on 2008-03-27

* debian/patches/59-fix-mysql-replication-logs.dpatch:
  Fix mysql replication: relay-logs were stored in /var/run. (LP: #119271).
  Patch taken from 5.0.54.
* debian/patches/58-disable-ndb-backup-print.dpatch:
  update description of ndb_backup_print patch.

37. By Mathias Gug on 2008-03-26

Disable ndb_backup_print tests as it fails sometimes (LP: #194542).
Patch taken from 5.0.54.

36. By Mathias Gug on 2008-03-25

[ Nicolas Valcárcel ]
* Confirming password on install if given (LP: #162167)

[ Jamie Strandboge ]
* follow ApparmorProfileMigration and force apparmor complain mode on some
  upgrades (LP: #203531)
  - debian/control: Recommends apparmor >= 2.1+1075-0ubuntu6
  - debian/mysql-server-5.0.dirs: add etc/apparmor.d/force-complain
  - debian/mysql-server-5.0.preinst: create symlink for force-complain/
    on pre-feisty upgrades, upgrades where apparmor-profiles profile is
    unchanged (ie non-enforcing) and upgrades where the profile doesn't
    exist
  - debian/mysql-server-5.0.postrm: remove symlink in force-complain/ on
    purge
* debian/additions/my.cnf: add warning about apparmor (LP: #201799)

35. By Jamie Strandboge on 2008-03-17

* debian/patches/92_fix_order_by32202.dpatch: fix for ORDER BY not working
  with GROUP BY (LP: #202706)
* References:
  http://bugs.mysql.com/bug.php?id=32202