Here is an update to MySQL 5.0.45. There have been 2 security fixes in this release..
A malformed password packet in the connection protocol could cause the server to crash. Thanks for Dormando for reporting this bug and providing details and a proof of concept. (Bug#28984) CREATE TABLE LIKE did not require any privileges on the source table. Now it requires the SELECT privilege. (Bug#25578) In addition, CREATE TABLE LIKE was not isolated from alteration by other connections, which resulted in various errors and incorrect binary log order when trying to execute concurrently a CREATE TABLE LIKE statement and either DDL statements on the source table or DML or DDL statements on the target table. (Bug#23667) Index: Makefile =================================================================== RCS file: /cvs/ports/databases/mysql/Makefile,v retrieving revision 1.131 diff -u -p -r1.131 Makefile --- Makefile 7 Jun 2007 20:35:35 -0000 1.131 +++ Makefile 14 Jul 2007 19:49:11 -0000 @@ -9,7 +9,7 @@ COMMENT-main= "multithreaded SQL databas COMMENT-server= "multithreaded SQL database (server)" COMMENT-tests= "multithreaded SQL database (regression test suite)" -VERSION= 5.0.41 +VERSION= 5.0.45 DISTNAME= mysql-${VERSION} PKGNAME-main= mysql-client-${VERSION} PKGNAME-server= mysql-server-${VERSION} Index: distinfo =================================================================== RCS file: /cvs/ports/databases/mysql/distinfo,v retrieving revision 1.30 diff -u -p -r1.30 distinfo --- distinfo 7 Jun 2007 20:35:35 -0000 1.30 +++ distinfo 14 Jul 2007 20:18:25 -0000 @@ -1,5 +1,5 @@ -MD5 (mysql-5.0.41.tar.gz) = tFzWyJ4138HNvhofeCrvvw== -RMD160 (mysql-5.0.41.tar.gz) = V/K1rGKIFKvSsZomPNLJDj4gWT0= -SHA1 (mysql-5.0.41.tar.gz) = zCoRnJ4HFz/ObXj8h9lsYQLuqzY= -SHA256 (mysql-5.0.41.tar.gz) = CMJyRsqbnPaVZ66mO4/XrvM3aeNp+azxY2Y0CX3Ed3U= -SIZE (mysql-5.0.41.tar.gz) = 24083795 +MD5 (mysql-5.0.45.tar.gz) = oqHFqCuyK0Wrdqjsq5ThDQ== +RMD160 (mysql-5.0.45.tar.gz) = 7mcXxl3Hu2tbWWuQ72xHx/3r9fs= +SHA1 (mysql-5.0.45.tar.gz) = pfuo4ASsxDrBpXbXKPECFfVOviA= +SHA256 (mysql-5.0.45.tar.gz) = 5EQ9jchZ7VO9nzvvFDzjDH9d7magJ0jpoAMTa+JeAGA= +SIZE (mysql-5.0.45.tar.gz) = 24433261 Index: patches/patch-configure_in =================================================================== RCS file: /cvs/ports/databases/mysql/patches/patch-configure_in,v retrieving revision 1.22 diff -u -p -r1.22 patch-configure_in --- patches/patch-configure_in 7 Jun 2007 20:35:35 -0000 1.22 +++ patches/patch-configure_in 14 Jul 2007 20:21:44 -0000 @@ -1,7 +1,12 @@ $OpenBSD: patch-configure_in,v 1.22 2007/06/07 20:35:35 ckuethe Exp $ ---- configure.in.orig Wed May 2 16:39:58 2007 -+++ configure.in Sun May 13 03:33:40 2007 -@@ -465,44 +465,7 @@ AC_SUBST(ICHECK) +--- configure.in.orig Wed Jul 4 09:06:08 2007 ++++ configure.in Sat Jul 14 16:21:38 2007 +@@ -489,48 +489,11 @@ then + fi + AC_SUBST(ICHECK) + +-# Lock for PS ++# Look for PS AC_PATH_PROG(PS, ps, ps) AC_MSG_CHECKING("how to check if pid exists") PS=$ac_cv_path_PS @@ -27,7 +32,7 @@ $OpenBSD: patch-configure_in,v 1.22 2007 - FIND_PROC="$PS \$\$PID | grep -v grep | grep \$\$MYSQLD > /dev/null" -else - case $SYSTEM_TYPE in -- *freebsd*) +- *freebsd*|*dragonfly*) - FIND_PROC="$PS p \$\$PID | grep -v grep | grep \$\$MYSQLD > /dev/null" - ;; - *darwin*) @@ -47,7 +52,7 @@ $OpenBSD: patch-configure_in,v 1.22 2007 AC_SUBST(FIND_PROC) AC_MSG_RESULT("$FIND_PROC") -@@ -835,7 +798,8 @@ AC_ARG_WITH(libwrap, +@@ -864,7 +827,8 @@ AC_ARG_WITH(libwrap, AC_CHECK_HEADER(tcpd.h, LIBS="-lwrap $LIBS" AC_MSG_CHECKING(for TCP wrappers library -lwrap) @@ -57,7 +62,7 @@ $OpenBSD: patch-configure_in,v 1.22 2007 int allow_severity = 0; int deny_severity = 0; -@@ -1603,7 +1567,7 @@ then +@@ -1632,7 +1596,7 @@ then AC_CHECK_LIB(c_r,strtok_r) case "$with_osf32_threads---$target_os" in # Don't keep -lc_r in LIBS; -pthread handles it magically @@ -66,7 +71,7 @@ $OpenBSD: patch-configure_in,v 1.22 2007 esac AC_CHECK_FUNCS(strtok_r pthread_init) -@@ -1651,29 +1615,6 @@ case $SYSTEM_TYPE in +@@ -1680,29 +1644,6 @@ case $SYSTEM_TYPE in AC_SYS_RESTARTABLE_SYSCALLS ;; esac Index: patches/patch-mysql-test_Makefile_in =================================================================== RCS file: /cvs/ports/databases/mysql/patches/patch-mysql-test_Makefile_in,v retrieving revision 1.14 diff -u -p -r1.14 patch-mysql-test_Makefile_in --- patches/patch-mysql-test_Makefile_in 7 Jun 2007 20:35:35 -0000 1.14 +++ patches/patch-mysql-test_Makefile_in 14 Jul 2007 20:21:44 -0000 @@ -1,7 +1,7 @@ $OpenBSD: patch-mysql-test_Makefile_in,v 1.14 2007/06/07 20:35:35 ckuethe Exp $ ---- mysql-test/Makefile.in.orig Wed May 2 16:42:28 2007 -+++ mysql-test/Makefile.in Sun May 13 03:33:40 2007 -@@ -373,7 +373,7 @@ zlib_dir = @zlib_dir@ +--- mysql-test/Makefile.in.orig Wed Jul 4 09:09:38 2007 ++++ mysql-test/Makefile.in Sat Jul 14 16:19:38 2007 +@@ -375,7 +375,7 @@ zlib_dir = @zlib_dir@ @[EMAIL PROTECTED] = ndb @[EMAIL PROTECTED] = \"\" @[EMAIL PROTECTED] = \"--ndbcluster\" Index: patches/patch-scripts_Makefile_in =================================================================== RCS file: /cvs/ports/databases/mysql/patches/patch-scripts_Makefile_in,v retrieving revision 1.8 diff -u -p -r1.8 patch-scripts_Makefile_in --- patches/patch-scripts_Makefile_in 7 Jun 2007 20:35:35 -0000 1.8 +++ patches/patch-scripts_Makefile_in 14 Jul 2007 20:21:44 -0000 @@ -1,7 +1,7 @@ $OpenBSD: patch-scripts_Makefile_in,v 1.8 2007/06/07 20:35:35 ckuethe Exp $ ---- scripts/Makefile.in.orig Wed May 2 16:43:17 2007 -+++ scripts/Makefile.in Sun May 13 03:33:40 2007 -@@ -667,6 +667,7 @@ mysql_fix_privilege_tables.sql: mysql_system_tables.sq +--- scripts/Makefile.in.orig Wed Jul 4 09:10:00 2007 ++++ scripts/Makefile.in Sat Jul 14 16:19:38 2007 +@@ -786,6 +786,7 @@ mysql_fix_privilege_tables_sql.c: comp_sql.c mysql_fix -e 's!@''datadir''@!$(datadir)!g' \ -e 's!@''localstatedir''@!$(localstatedir)!g' \ -e 's!@''libexecdir''@!$(libexecdir)!g' \ Index: patches/patch-scripts_mysql_install_db_sh =================================================================== RCS file: /cvs/ports/databases/mysql/patches/patch-scripts_mysql_install_db_sh,v retrieving revision 1.7 diff -u -p -r1.7 patch-scripts_mysql_install_db_sh --- patches/patch-scripts_mysql_install_db_sh 7 Jun 2007 20:35:35 -0000 1.7 +++ patches/patch-scripts_mysql_install_db_sh 14 Jul 2007 20:21:44 -0000 @@ -1,6 +1,6 @@ $OpenBSD: patch-scripts_mysql_install_db_sh,v 1.7 2007/06/07 20:35:35 ckuethe Exp $ ---- scripts/mysql_install_db.sh.orig Wed May 2 16:39:59 2007 -+++ scripts/mysql_install_db.sh Sun May 13 03:41:46 2007 +--- scripts/mysql_install_db.sh.orig Wed Jul 4 09:06:09 2007 ++++ scripts/mysql_install_db.sh Sat Jul 14 16:19:38 2007 @@ -21,7 +21,8 @@ in_rpm=0 windows=0 @@ -19,7 +19,7 @@ $OpenBSD: patch-scripts_mysql_install_db --skip-name-resolve) ip_only=1 ;; --verbose) verbose=1 ;; # Obsolete --rpm) in_rpm=1 ;; -@@ -248,20 +250,18 @@ fi +@@ -252,20 +254,18 @@ fi # Create database directories mysql & test if test ! -d $ldata; then @@ -44,7 +44,7 @@ $OpenBSD: patch-scripts_mysql_install_db if test -n "$user"; then args="$args --user=$user" -@@ -296,11 +296,6 @@ then +@@ -300,11 +300,6 @@ then fi fi @@ -56,7 +56,7 @@ $OpenBSD: patch-scripts_mysql_install_db if test "$windows" -eq 0 then # A root password should of course also be set on Windows! -@@ -315,15 +310,6 @@ then +@@ -319,15 +314,6 @@ then echo "$bindir/mysqladmin -u root -h $hostname password 'new-password'" echo "See the manual for more instructions." Index: patches/patch-sql_mysqld_cc =================================================================== RCS file: /cvs/ports/databases/mysql/patches/patch-sql_mysqld_cc,v retrieving revision 1.9 diff -u -p -r1.9 patch-sql_mysqld_cc --- patches/patch-sql_mysqld_cc 7 Jun 2007 20:35:35 -0000 1.9 +++ patches/patch-sql_mysqld_cc 14 Jul 2007 20:21:47 -0000 @@ -1,7 +1,7 @@ $OpenBSD: patch-sql_mysqld_cc,v 1.9 2007/06/07 20:35:35 ckuethe Exp $ ---- sql/mysqld.cc.orig Wed May 2 16:39:46 2007 -+++ sql/mysqld.cc Sun May 13 03:33:40 2007 -@@ -3502,7 +3502,7 @@ int main(int argc, char **argv) +--- sql/mysqld.cc.orig Wed Jul 4 09:06:03 2007 ++++ sql/mysqld.cc Sat Jul 14 16:19:38 2007 +@@ -3543,7 +3543,7 @@ int main(int argc, char **argv) init_ssl(); #ifdef HAVE_LIBWRAP Index: pkg/PLIST-main =================================================================== RCS file: /cvs/ports/databases/mysql/pkg/PLIST-main,v retrieving revision 1.4 diff -u -p -r1.4 PLIST-main --- pkg/PLIST-main 7 Jun 2007 20:35:35 -0000 1.4 +++ pkg/PLIST-main 14 Jul 2007 21:04:32 -0000 @@ -21,6 +21,7 @@ include/mysql/keycache.h include/mysql/m_ctype.h include/mysql/m_string.h include/mysql/my_alloc.h +include/mysql/my_attribute.h include/mysql/my_config.h include/mysql/my_dbug.h include/mysql/my_dir.h Index: pkg/PLIST-tests =================================================================== RCS file: /cvs/ports/databases/mysql/pkg/PLIST-tests,v retrieving revision 1.24 diff -u -p -r1.24 PLIST-tests --- pkg/PLIST-tests 7 Jun 2007 20:35:36 -0000 1.24 +++ pkg/PLIST-tests 14 Jul 2007 21:05:00 -0000 @@ -44,7 +44,9 @@ share/mysql-test/include/have_gbk.inc share/mysql-test/include/have_geometry.inc share/mysql-test/include/have_innodb.inc share/mysql-test/include/have_latin2_ch.inc +share/mysql-test/include/have_log_bin.inc share/mysql-test/include/have_lowercase0.inc +share/mysql-test/include/have_lowercase1.inc share/mysql-test/include/have_multi_ndb.inc share/mysql-test/include/have_ndb.inc share/mysql-test/include/have_outfile.inc @@ -57,7 +59,6 @@ share/mysql-test/include/have_udf.inc share/mysql-test/include/have_ujis.inc share/mysql-test/include/im_check_env.inc share/mysql-test/include/innodb_rollback_on_timeout.inc -share/mysql-test/include/is_debug_build.inc share/mysql-test/include/loaddata_autocom.inc share/mysql-test/include/master-slave.inc share/mysql-test/include/mysqltest-x.inc @@ -76,6 +77,7 @@ share/mysql-test/include/ps_query.inc share/mysql-test/include/ps_renew.inc share/mysql-test/include/report-features.test share/mysql-test/include/rpl_stmt_seq.inc +share/mysql-test/include/show_binlog_events.inc share/mysql-test/include/show_msg.inc share/mysql-test/include/show_msg80.inc share/mysql-test/include/sp-vars.inc @@ -83,8 +85,13 @@ share/mysql-test/include/strict_autoinc. share/mysql-test/include/system_db_struct.inc share/mysql-test/include/test_outfile.inc share/mysql-test/include/testdb_only.inc +share/mysql-test/include/uses_vardir.inc share/mysql-test/include/varchar.inc share/mysql-test/include/wait_for_query_to_suceed.inc +share/mysql-test/include/wait_for_slave_io_to_stop.inc +share/mysql-test/include/wait_for_slave_sql_to_stop.inc +share/mysql-test/include/wait_for_slave_to_start.inc +share/mysql-test/include/wait_for_slave_to_stop.inc share/mysql-test/include/wait_show_pattern.inc share/mysql-test/include/wait_slave_status.inc share/mysql-test/include/windows.inc @@ -131,6 +138,7 @@ share/mysql-test/r/big_test.require share/mysql-test/r/bigint.result share/mysql-test/r/binary.result share/mysql-test/r/binlog.result +share/mysql-test/r/binlog_killed.result share/mysql-test/r/blackhole.result share/mysql-test/r/bool.result share/mysql-test/r/bootstrap.result @@ -160,7 +168,6 @@ share/mysql-test/r/ctype_cp1250_ch.resul share/mysql-test/r/ctype_cp1251.result share/mysql-test/r/ctype_cp932.result share/mysql-test/r/ctype_cp932_binlog.result -share/mysql-test/r/ctype_cp932_notembedded.result share/mysql-test/r/ctype_create.result share/mysql-test/r/ctype_eucjpms.result share/mysql-test/r/ctype_euckr.result @@ -193,6 +200,7 @@ share/mysql-test/r/drop.result share/mysql-test/r/drop_temp_table.result share/mysql-test/r/empty_table.result share/mysql-test/r/endspace.result +share/mysql-test/r/error_simulation.result share/mysql-test/r/errors.result share/mysql-test/r/exampledb.result share/mysql-test/r/execution_constants.result @@ -201,7 +209,6 @@ share/mysql-test/r/federated.result share/mysql-test/r/federated_archive.result share/mysql-test/r/federated_bug_13118.result share/mysql-test/r/fix_priv_tables.result -share/mysql-test/r/fix_priv_tabs.result share/mysql-test/r/flush.result share/mysql-test/r/flush2.result share/mysql-test/r/flush_block_commit.result @@ -274,6 +281,7 @@ share/mysql-test/r/have_gbk.require share/mysql-test/r/have_geometry.require share/mysql-test/r/have_innodb.require share/mysql-test/r/have_latin2_ch.require +share/mysql-test/r/have_log_bin.require share/mysql-test/r/have_met_timezone.require share/mysql-test/r/have_moscow_leap_timezone.require share/mysql-test/r/have_mysql_upgrade.result @@ -351,9 +359,12 @@ share/mysql-test/r/loaddata_autocom_ndb. share/mysql-test/r/lock.result share/mysql-test/r/lock_multi.result share/mysql-test/r/lock_tables_lost_commit.result +share/mysql-test/r/long_tmpdir.result share/mysql-test/r/lowercase0.require +share/mysql-test/r/lowercase1.require share/mysql-test/r/lowercase2.require share/mysql-test/r/lowercase_fs_off.result +share/mysql-test/r/lowercase_mixed_tmpdir.result share/mysql-test/r/lowercase_table.result share/mysql-test/r/lowercase_table2.result share/mysql-test/r/lowercase_table3.result @@ -487,6 +498,7 @@ share/mysql-test/r/rpl_charset.result share/mysql-test/r/rpl_charset_sjis.result share/mysql-test/r/rpl_commit_after_flush.result share/mysql-test/r/rpl_create_database.result +share/mysql-test/r/rpl_critical_errors.result share/mysql-test/r/rpl_ddl.result share/mysql-test/r/rpl_deadlock.result share/mysql-test/r/rpl_delete_all.result @@ -588,6 +600,7 @@ share/mysql-test/r/sp.result share/mysql-test/r/sp_notembedded.result share/mysql-test/r/sp_stress_case.result share/mysql-test/r/sp_trans.result +share/mysql-test/r/sp_trans_log.result share/mysql-test/r/sql_mode.result share/mysql-test/r/ssl.result share/mysql-test/r/ssl_compress.result @@ -652,6 +665,7 @@ share/mysql-test/r/user_limits.result share/mysql-test/r/user_var-binlog.result share/mysql-test/r/user_var.result share/mysql-test/r/varbinary.result +share/mysql-test/r/variables-big.result share/mysql-test/r/variables.result share/mysql-test/r/view.result share/mysql-test/r/view_grant.result @@ -759,7 +773,6 @@ share/mysql-test/suite/funcs_1/lib/ share/mysql-test/suite/funcs_1/lib/DataGen_local.pl share/mysql-test/suite/funcs_1/lib/DataGen_modify.pl share/mysql-test/suite/funcs_1/r/ -share/mysql-test/suite/funcs_1/r/a_version_check.result share/mysql-test/suite/funcs_1/r/innodb__datadict.result share/mysql-test/suite/funcs_1/r/innodb__load.result share/mysql-test/suite/funcs_1/r/innodb_bitdata.result @@ -781,7 +794,6 @@ share/mysql-test/suite/funcs_1/r/innodb_ share/mysql-test/suite/funcs_1/r/innodb_trig_frkey.result share/mysql-test/suite/funcs_1/r/innodb_triggers.result share/mysql-test/suite/funcs_1/r/innodb_views.result -share/mysql-test/suite/funcs_1/r/innodb_views.warnings share/mysql-test/suite/funcs_1/r/memory__datadict.result share/mysql-test/suite/funcs_1/r/memory__load.result share/mysql-test/suite/funcs_1/r/memory_bitdata.result @@ -802,7 +814,6 @@ share/mysql-test/suite/funcs_1/r/memory_ share/mysql-test/suite/funcs_1/r/memory_trig_1011ext.result share/mysql-test/suite/funcs_1/r/memory_triggers.result share/mysql-test/suite/funcs_1/r/memory_views.result -share/mysql-test/suite/funcs_1/r/memory_views.warnings share/mysql-test/suite/funcs_1/r/myisam__datadict.result share/mysql-test/suite/funcs_1/r/myisam__load.result share/mysql-test/suite/funcs_1/r/myisam_bitdata.result @@ -823,7 +834,6 @@ share/mysql-test/suite/funcs_1/r/myisam_ share/mysql-test/suite/funcs_1/r/myisam_trig_1011ext.result share/mysql-test/suite/funcs_1/r/myisam_triggers.result share/mysql-test/suite/funcs_1/r/myisam_views.result -share/mysql-test/suite/funcs_1/r/myisam_views.warnings share/mysql-test/suite/funcs_1/storedproc/ share/mysql-test/suite/funcs_1/storedproc/cleanup_sp_tb.inc share/mysql-test/suite/funcs_1/storedproc/load_sp_tb.inc @@ -836,7 +846,6 @@ share/mysql-test/suite/funcs_1/storedpro share/mysql-test/suite/funcs_1/storedproc/storedproc_10.inc share/mysql-test/suite/funcs_1/storedproc/storedproc_master.inc share/mysql-test/suite/funcs_1/t/ -share/mysql-test/suite/funcs_1/t/a_version_check.test share/mysql-test/suite/funcs_1/t/disabled.def share/mysql-test/suite/funcs_1/t/innodb__datadict.test share/mysql-test/suite/funcs_1/t/innodb__load.test @@ -1051,6 +1060,7 @@ share/mysql-test/t/bigint.test share/mysql-test/t/binary.test share/mysql-test/t/binlog-master.opt share/mysql-test/t/binlog.test +share/mysql-test/t/binlog_killed.test share/mysql-test/t/blackhole.test share/mysql-test/t/bool.test share/mysql-test/t/bootstrap.test @@ -1079,7 +1089,6 @@ share/mysql-test/t/ctype_cp1250_ch.test share/mysql-test/t/ctype_cp1251.test share/mysql-test/t/ctype_cp932.test share/mysql-test/t/ctype_cp932_binlog.test -share/mysql-test/t/ctype_cp932_notembedded.test share/mysql-test/t/ctype_create.test share/mysql-test/t/ctype_eucjpms.test share/mysql-test/t/ctype_euckr.test @@ -1116,6 +1125,8 @@ share/mysql-test/t/drop.test share/mysql-test/t/drop_temp_table.test share/mysql-test/t/empty_table.test share/mysql-test/t/endspace.test +share/mysql-test/t/error_simulation-master.opt +share/mysql-test/t/error_simulation.test share/mysql-test/t/errors.test share/mysql-test/t/exampledb.test share/mysql-test/t/execution_constants.test @@ -1253,7 +1264,13 @@ share/mysql-test/t/lock_multi.test share/mysql-test/t/lock_tables_lost_commit-master.opt share/mysql-test/t/lock_tables_lost_commit.test share/mysql-test/t/log.sh +share/mysql-test/t/long_tmpdir-master.opt +share/mysql-test/t/long_tmpdir-master.sh +share/mysql-test/t/long_tmpdir.test share/mysql-test/t/lowercase_fs_off.test +share/mysql-test/t/lowercase_mixed_tmpdir-master.opt +share/mysql-test/t/lowercase_mixed_tmpdir-master.sh +share/mysql-test/t/lowercase_mixed_tmpdir.test share/mysql-test/t/lowercase_table-master.opt share/mysql-test/t/lowercase_table.test share/mysql-test/t/lowercase_table2.test @@ -1414,6 +1431,7 @@ share/mysql-test/t/rpl_commit_after_flus share/mysql-test/t/rpl_create_database-master.opt share/mysql-test/t/rpl_create_database-slave.opt share/mysql-test/t/rpl_create_database.test +share/mysql-test/t/rpl_critical_errors.test share/mysql-test/t/rpl_ddl.test share/mysql-test/t/rpl_deadlock-slave.opt share/mysql-test/t/rpl_deadlock.test @@ -1562,6 +1580,7 @@ share/mysql-test/t/sp.test share/mysql-test/t/sp_notembedded.test share/mysql-test/t/sp_stress_case.test share/mysql-test/t/sp_trans.test +share/mysql-test/t/sp_trans_log.test share/mysql-test/t/sql_mode.test share/mysql-test/t/ssl.test share/mysql-test/t/ssl_compress.test @@ -1635,6 +1654,7 @@ share/mysql-test/t/user_var-binlog.test share/mysql-test/t/user_var.test share/mysql-test/t/utils.sh share/mysql-test/t/varbinary.test +share/mysql-test/t/variables-big.test share/mysql-test/t/variables.test share/mysql-test/t/view.test share/mysql-test/t/view_grant.test