Commit Graph

76 Commits

Author SHA1 Message Date
brad
843e3c4483 fix symlink vulnerability.
http://lists.mysql.com/internals/20600

From: Bernd Ahlers <b dot ahlers at ba-net dot org>
2005-01-20 03:00:00 +00:00
brad
7f3db6f8cd go away 0 byte file. 2005-01-20 02:49:25 +00:00
brad
1337fc6ca9 upgrade to MySQL 4.0.23
fixes some crashing issues among many other bug fixes,
seems to have resolved a crashing issue henning@ was
experiencing on sparc64.
2005-01-14 01:42:58 +00:00
brad
fc486884a3 * Fixed bug with crash of server on some values of read_rnd_buffer_size (Bug #5492) 2004-10-20 08:09:36 +00:00
brad
f224072f1b * Fixed bug in privilege checking where, under some conditions, one
was able to grant privileges on the database, he has no privileges
  on. (Bug #3933)
2004-10-20 07:36:04 +00:00
brad
748c1d4b56 * Fixed potential memory overrun in `mysql_real_connect()' (which
required a compromised DNS server and certain operating systems).
  (Bug #4017)

* Fixed crash in `MATCH ... AGAINST()' on a phrase search operator
  with a missing closing double quote. (Bug #3870)

* Fixed a crash on declaration of `DECIMAL(0,...)' column. (Bug
  #4046)
2004-10-20 04:47:29 +00:00
brad
feb0e2638a sync 2004-10-20 01:54:05 +00:00
robert
a56bc44979 SECURITY:
Jeroen van Wolffelaar <jeroen@wolffelaar.nl> discovered an
insecure temporary file vulnerability in the mysqlhotcopy
script when using the scp method.

ok naddy, brad, pvalchev
2004-08-20 09:21:19 +00:00
espie
9aba03e0b8 OpenBSD now is a HAVE_ERRNO_AS_DEFINE platform.
(regen other patches).

Quick fix, since this breaks qt3 build, and thus a lot of ports.
2004-07-18 11:38:23 +00:00
brad
9edc7d5f0b use this workaround only with gcc2 2004-06-24 06:35:51 +00:00
brad
42c825fdf7 remove extra ulimit setting 2004-05-24 22:40:28 +00:00
brad
92121e2a16 upgrade to MySQL 4.0.20 2004-05-21 12:16:21 +00:00
brad
c76e4b492f revert back to 4.0.18
for details http://dev.mysql.com/doc/mysql/en/News-4.0.19.html

thanks to Frank Denis for pointing this out to me.
2004-05-16 09:01:15 +00:00
brad
b72dc871d3 upgrade to MySQL 4.0.19 2004-05-16 04:30:39 +00:00
brad
91d68f94f5 Fix a tmpfile/symlink issue with mysqlbug.
http://marc.theaimsgroup.com/?l=bugtraq&m=108023246916294&w=2

Fix from MySQL BitKeeper repo via Robert Nagy <thuglife at bsd dot hu>
2004-04-16 00:14:03 +00:00
brad
b6ecd9069b upgrade to MySQL 4.0.18 2004-02-22 01:20:11 +00:00
wilfried
dc39a99c4d allow make regress to run all tests even if some fail, ok brad 2003-12-30 20:01:21 +00:00
brad
0a085096c2 fix a typo which I had fixed locally but I didnt re-run update-patches
Noticed by pb@
2003-12-30 08:47:02 +00:00
brad
22182225c4 missed this one. 2003-12-30 05:58:51 +00:00
brad
f8f2fea305 upgrade to MySQL 4.0.17
LOTS of people have asked for this so here is my work in progress.
test as much as possible.
2003-12-30 05:57:30 +00:00
brad
c50020e757 use new user/group schema 2003-08-27 00:14:49 +00:00
brad
90327a4768 upgrade to MySQL 3.23.57 + patches
fixes some older security issues as well as a soon to be disclosed issue.

ok naddy@
2003-08-26 15:37:18 +00:00
pvalchev
56b04f708e these innobase libraries are used only as static helper libraries to
link mysql, and are not actually supposed to be installed anywhere,
especially not some random location outside of fake...

discussed w/ naddy, ok by maintainer brad
2003-05-21 07:04:54 +00:00
avsm
c4574d65d9 incomplete format string; bug #287 filed with mysql - brad@ ok 2003-04-14 14:27:43 +00:00
brad
999d519077 upgrade to MySQL 3.23.55
STABILITY FIX:
Fixed double free'd pointer bug in mysql_change_user() handling, that
enabled a specially hacked version of MySQL client to crash mysqld.
Note, that one needs to login to the server by using a valid user
account to be able to exploit this bug.
2003-01-29 16:35:55 +00:00
brad
b14ce80e80 need this too. 2002-12-14 23:57:37 +00:00
brad
d320bc2c54 upgrade to MySQL 3.23.54 2002-12-14 23:56:43 +00:00
brad
f22465fbc8 update for sparc64 2002-11-14 03:47:55 +00:00
brad
7590678bfd Enable workaround for OpenBSD pthreads and broken realpath().
Problem described in this post...
http://groups.google.com/groups?q=mysql+unknown+database+bsd&hl=en&lr=&ie=UTF-8&
safe=off&selm=a9n0f2%24e4e%241%40FreeBSD.csie.NCTU.edu.tw&rnum=1
--
From: Sam Smith <S@mSmith.net>
2002-08-22 13:44:17 +00:00
brad
2c33174e5f bring in a fix from newer MySQL which allows the autoconf option
--enable-local-infile to work as expected. before it didn't do anything.
2002-07-11 15:42:17 +00:00
brad
6e628c3ab3 patches to fix a bug which causes mysqlgui to crash.
--
From: MySQL mailing list via wilfried@
2002-03-27 18:49:09 +00:00
brad
d4dab887c8 - use -p flag for mkdir in mysql_install_db
- if the socket dir does not exist then create it as part of startup in
safe_mysqld
2002-03-19 19:11:39 +00:00
espie
b96e8276c4 fix inline crap. 2002-03-19 03:22:40 +00:00
brad
493bc5d2d0 - Move socket from the database dir to /var/run/mysql.
- Tighten perms on the database dir.
--
Suggestion of using /var/run/mysql from: Wilbern Cobb
2002-02-19 03:58:57 +00:00
brad
e87235f87e upgrade to MySQL 3.23.49 2002-02-18 03:25:33 +00:00
brad
feb4f03daf upgrade to MySQL 3.23.48 2002-02-10 03:49:53 +00:00
brad
f832fe4919 upgrade to MySQL 3.23.47 2001-12-29 17:56:56 +00:00
brad
af59157dc9 upgrade to MySQL 3.23.46
--
- The port has switched back to using native threads. Only tested and known to work on i386. For everything else the port is currently marked BROKEN until the appropriate architectures are tested. Do not even try this if you're not running -current libc_r.
- As suggested by Marc Espie, make symlink for the MySQL client library in lib/ to eliminate the need for adding lib/mysql to the shlib dir path. Porters have to be careful and ensure autoconf scripts do not arbitrarily enable MySQL support after this change.
2001-12-22 03:54:44 +00:00
wilfried
a01ec9a412 sparc64 didn't like the old values, ok brad@, naddy@ 2001-10-18 07:14:54 +00:00
brad
851b2a2b62 use ports in-tree libtool patches. 2001-10-06 03:55:34 +00:00
brad
027ccc4cbb upgrade to MySQL 3.23.42 2001-09-10 02:59:35 +00:00
brad
ed4c8a5aba upgrade to MySQL 3.23.41
--
New version pointed out by: Wilbern Cobb <cobb@vedge.com.ar>
2001-08-14 02:06:29 +00:00
brad
666752fc75 upgrade to MySQL 3.23.40 2001-07-22 20:35:29 +00:00
brad
e0021e087f upgrade to MySQL 3.23.39 2001-06-15 19:10:11 +00:00
brad
1f15fd42e7 upgrade to MySQL 3.23.38
- Also split the package into client and a server sub-package which
depends on the client portion. This allows for adding/removing the server
without needing to remove ports that might be dependent on the client
portion.
- innodb FLAVOR goes away and is replaced with the max FLAVOR like the
real MySQL distribution which gives us both Berkeley DB and InnoDB tables
for transaction support.
2001-06-02 20:18:43 +00:00
brad
f1f7315d48 upgrade to MySQL 3.23.37 2001-04-20 13:49:38 +00:00
brad
4e2d38df35 upgrade to MySQL 3.23.36 2001-03-28 22:12:18 +00:00
brad
2373a38d4e upgrade to MySQL 3.23.35
--
Availability of this version pointed out to by: fries@
2001-03-16 21:14:42 +00:00
brad
eeb6788aa2 upgrade to MySQL 3.23.34 2001-03-12 22:30:59 +00:00
danh
5be9a151e3 sync libtool patch 2001-02-20 19:05:04 +00:00