mysql-dfsg-5.0 5.0.26-2 source package in Ubuntu

Changelog

mysql-dfsg-5.0 (5.0.26-2) unstable; urgency=high

  * Fixed FTBFS for Alpha by applying an upstream patch (thanks to Falk
    Hueffner). Closes: #395921

mysql-dfsg-5.0 (5.0.26-1) unstable; urgency=high

  * SECURITY: 
    This combined release of 5.0.25 and 5.0.26 fixes lot of possible server
    crashs so it should get into Etch. Quoting the changelog (bug numbers are
    bugs.mysql.com ones):
    - character_set_results can be NULL to signify no conversion, but some
      code did not check for NULL, resulting in a server crash. (Bug#21913)
    - Using cursors with READ COMMITTED isolation level could cause InnoDB to
      crash. (Bug#19834)
    - Some prepared statements caused a server crash when executed a second
      time. (Bug#21166)
    - When DROP DATABASE or SHOW OPEN TABLES was issued while concurrently 
      issuing DROP TABLE (or RENAME TABLE, CREATE TABLE LIKE or any other 
      statement that required a name lock) in another connection, the server 
      crashed. (Bug#21216)
    - Use of zero-length variable names caused a server crash. (Bug#20908)
    - For InnoDB tables, the server could crash when executing NOT IN () 
      subqueries. (Bug#21077) 
    - Repeated DROP TABLE statements in a stored procedure could sometimes
      cause the server to crash. (Bug#19399)
    - Performing an INSERT on a view that was defined using a SELECT that 
      specified a collation and a column alias caused the server to crash 
      (Bug#21086).
    - A query of the form shown here caused the server to crash. (Bug#21007)
    - NDB Cluster: Some queries involving joins on very large NDB tables could
      crash the MySQL server. (Bug#21059)
    - The character set was not being properly initialized for CAST() with a
      type like CHAR(2) BINARY, which resulted in incorrect results or even a 
      server crash. (Bug#17903)
    - For certain queries, the server incorrectly resolved a reference to an
      aggregate function and crashed. (Bug#20868)
    - The server crashed when using the range access method to execut a
      subquery with a ORDER BY DESC  clause. (Bug#20869)
    - Triggers on tables in the mysql database caused a server crash. Triggers
      for tables in this database now are disallowed. (Bug#18361)
    - Using SELECT on a corrupt MyISAM table using the dynamic record format 
      could cause a server crash. (Bug#19835) 
    - Use of MIN() or MAX()  with GROUP BY on a ucs2  column could cause a
      server crash. (Bug#20076)
    - Selecting from a MERGE table could result in a server crash if the
      underlying tables had fewer indexes than the MERGE table itself. 
      (Bug#21617, Bug#22937)

  * New upstream release.
    - This bug would cause trouble for Sarge->Etch upgrades, it was supposed to
      have been fixed in 5.0.16 but that apparently did not fix the whole
      problem:
      Using tables from MySQL 4.x in MySQL 5.x, in particular those with VARCHAR
      fields and using INSERT DELAYED to update data in the table would result in
      either data corruption or a server crash. (Bug#16611, Bug#16218, Bug#17294) 
      Closes: #386337
    - Fixes data corruption as an automatic client reconnect used to set
      the wrong character set. Closes: #365050
    - Fixes an undefined ulong type in an include file. Closes: #389102
    - Fixes wrong output format when using Unicode characters. Closes: #355302
    - Fixes mysql_upgrade when using a password. Closes: #371841
 
  [Christian Hammers]
  * Removed --sysconfdir from debian/rules as it puts /etc/mysql/ at the
    end of the my.cnf search patch thus overriding $HOME/my.cnf
    (thanks to Christoph Biedl). Closes: #394992
  * The provided patch from bug #385947 was wrong, the variable is called
    BLOCKSIZE not BLOCK_SIZE according to "strings `which df`" (thanks to
    Bruno Muller). Closes: #385947

  [sean finney]
  * new dutch debconf translations from Vincent Zweije (closes: #392809).
  * new japanese debconf translations from Hideki Yamane (closes: #391625).
  * new italian debconf translations from Luca Monducci (closes: #391741).
  * new french debconf translations from Christian Perrier (closes: #393334).
  * ran debconf-updatepo to merge the fuzzies into svn.
  * massage the following patches so they continue to apply cleanly:
    - 44_scripts__mysql_config__libs.dpatch to cleanly apply.
    - 45_warn-CLI-passwords.dpatch
    - 96_TEMP__libmysqlclient_ssl_symbols.dpatch (note, this patch might
      no longer be needed, but is retained "just in case" after massaging it)
  * the following patches have been incorporated upstream:
    - 70_kfreebsd.dpatch
    - 80_hurd_mach.dpatch
    - 87_ps_Hurd.dpatch
    - 90_TEMP__client__mysql_upgrade__O_EXEC.dpatch
    - 91_TEMP__client__mysql_upgrade__password.dpatch
    - 92_TEMP__client__mysql_upgrade__defaultgroups.dpatch
    - 94_TEMP__CVE-2006-4227.dpatch
    - 95_TEMP__CVE-2006-4226.dpatch
  * the udf_example.cc has disappeared from the source code, but there's
    a udf_example.c which seems to be a good example to use instead :)
  * update documentation in the configuration to no longer reference
    using my.cnf in the DATADIR, as it's never been the recommended
    method for debian systems and hasn't worked since 5.0 was released
    anyway (closes: #393868).

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  07 Nov 2006 03:04:38 +0000