[Pkg-mysql-commits] r2243 - in mysql-5.5/branches/unstable/debian: . patches

Clint Byrum spamaps-guest at alioth.debian.org
Fri Sep 27 01:59:42 UTC 2013


Author: spamaps-guest
Date: 2013-09-27 01:59:41 +0000 (Fri, 27 Sep 2013)
New Revision: 2243

Added:
   mysql-5.5/branches/unstable/debian/patches/33_scripts__mysql_create_system_tables__no_test.patch
   mysql-5.5/branches/unstable/debian/patches/41_scripts__mysql_install_db.sh__no_test.patch
   mysql-5.5/branches/unstable/debian/patches/50_mysql-test__db_test.patch
Modified:
   mysql-5.5/branches/unstable/debian/changelog
   mysql-5.5/branches/unstable/debian/patches/series
Log:
d/p/33_scripts__mysql_create_system_tables__no_test.patch,
d/p/41_scripts__mysql_install_db.sh__no_test.patch,
d/p/50_mysql-test__db_test.patch: Restored from mysql-5.1
package, inadvertently dropped in 5.5 transition. This
removes the global anonymous access to the database which
is a security concern.

Modified: mysql-5.5/branches/unstable/debian/changelog
===================================================================
--- mysql-5.5/branches/unstable/debian/changelog	2013-09-27 01:34:04 UTC (rev 2242)
+++ mysql-5.5/branches/unstable/debian/changelog	2013-09-27 01:59:41 UTC (rev 2243)
@@ -1,3 +1,14 @@
+mysql-5.5 (5.5.33+dfsg-2) UNRELEASED; urgency=low
+
+  * d/p/33_scripts__mysql_create_system_tables__no_test.patch,
+    d/p/41_scripts__mysql_install_db.sh__no_test.patch,
+    d/p/50_mysql-test__db_test.patch: Restored from mysql-5.1
+    package, inadvertently dropped in 5.5 transition. This
+    removes the global anonymous access to the database which
+    is a security concern.
+
+ -- Clint Byrum <spamaps at debian.org>  Thu, 26 Sep 2013 18:51:57 -0700
+
 mysql-5.5 (5.5.33+dfsg-1) unstable; urgency=low
 
   * d/rules, d/control: Remove gcc-4.4 dependency and disable X86

Added: mysql-5.5/branches/unstable/debian/patches/33_scripts__mysql_create_system_tables__no_test.patch
===================================================================
--- mysql-5.5/branches/unstable/debian/patches/33_scripts__mysql_create_system_tables__no_test.patch	                        (rev 0)
+++ mysql-5.5/branches/unstable/debian/patches/33_scripts__mysql_create_system_tables__no_test.patch	2013-09-27 01:59:41 UTC (rev 2243)
@@ -0,0 +1,24 @@
+From: ch at debian.org
+
+Index: mysql-5.5-5.5.33+dfsg/scripts/mysql_system_tables_data.sql
+===================================================================
+--- mysql-5.5-5.5.33+dfsg.orig/scripts/mysql_system_tables_data.sql	2013-09-26 18:55:38.493379938 -0700
++++ mysql-5.5-5.5.33+dfsg/scripts/mysql_system_tables_data.sql	2013-09-26 18:57:03.496458388 -0700
+@@ -31,8 +31,6 @@
+ -- Fill "db" table with default grants for anyone to
+ -- access database 'test' and 'test_%' if "db" table didn't exist
+ CREATE TEMPORARY TABLE tmp_db LIKE db;
+-INSERT INTO tmp_db VALUES ('%','test','','Y','Y','Y','Y','Y','Y','N','Y','Y','Y','Y','Y','Y','Y','Y','N','N','Y','Y');
+-INSERT INTO tmp_db VALUES ('%','test\_%','','Y','Y','Y','Y','Y','Y','N','Y','Y','Y','Y','Y','Y','Y','Y','N','N','Y','Y');
+ INSERT INTO db SELECT * FROM tmp_db WHERE @had_db_table=0;
+ DROP TABLE tmp_db;
+ 
+@@ -44,8 +42,6 @@
+ REPLACE INTO tmp_user SELECT @current_hostname,'root','','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','','','','',0,0,0,0,'','' FROM dual WHERE LOWER( @current_hostname) != 'localhost';
+ REPLACE INTO tmp_user VALUES ('127.0.0.1','root','','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','','','','',0,0,0,0,'','');
+ REPLACE INTO tmp_user VALUES ('::1','root','','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','','','','',0,0,0,0,'','');
+-INSERT INTO tmp_user (host,user) VALUES ('localhost','');
+-INSERT INTO tmp_user (host,user) SELECT @current_hostname,'' FROM dual WHERE LOWER(@current_hostname ) != 'localhost';
+ INSERT INTO user SELECT * FROM tmp_user WHERE @had_user_table=0;
+ DROP TABLE tmp_user;
+ 

Added: mysql-5.5/branches/unstable/debian/patches/41_scripts__mysql_install_db.sh__no_test.patch
===================================================================
--- mysql-5.5/branches/unstable/debian/patches/41_scripts__mysql_install_db.sh__no_test.patch	                        (rev 0)
+++ mysql-5.5/branches/unstable/debian/patches/41_scripts__mysql_install_db.sh__no_test.patch	2013-09-27 01:59:41 UTC (rev 2243)
@@ -0,0 +1,16 @@
+From: ch at debian.org
+Bug: http://bugs.mysql.com/bug.php?id=6901
+
+Index: mysql-5.5-5.5.33+dfsg/scripts/mysql_install_db.sh
+===================================================================
+--- mysql-5.5-5.5.33+dfsg.orig/scripts/mysql_install_db.sh	2013-09-26 18:57:32.730764845 -0700
++++ mysql-5.5-5.5.33+dfsg/scripts/mysql_install_db.sh	2013-09-26 18:57:32.726765077 -0700
+@@ -356,7 +356,7 @@
+ fi
+ 
+ # Create database directories
+-for dir in $ldata $ldata/mysql $ldata/test
++for dir in $ldata $ldata/mysql
+ do
+   if test ! -d $dir
+   then

Added: mysql-5.5/branches/unstable/debian/patches/50_mysql-test__db_test.patch
===================================================================
--- mysql-5.5/branches/unstable/debian/patches/50_mysql-test__db_test.patch	                        (rev 0)
+++ mysql-5.5/branches/unstable/debian/patches/50_mysql-test__db_test.patch	2013-09-27 01:59:41 UTC (rev 2243)
@@ -0,0 +1,19 @@
+From: Christian Hammers <ch at debian.org>
+Description: restores the rights for anybody to connect to the test
+ database so that the test suite can function properly.
+
+Index: mysql-5.5-5.5.33+dfsg/mysql-test/mysql-test-run.pl
+===================================================================
+--- mysql-5.5-5.5.33+dfsg.orig/mysql-test/mysql-test-run.pl	2013-09-26 18:57:40.686303901 -0700
++++ mysql-5.5-5.5.33+dfsg/mysql-test/mysql-test-run.pl	2013-09-26 18:57:40.682304133 -0700
+@@ -3355,6 +3355,10 @@
+     mtr_appendfile_to_file("$sql_dir/mysql_system_tables_data.sql",
+ 			   $bootstrap_sql_file);
+ 
++    mtr_tofile($bootstrap_sql_file, "-- Debian removed the default privileges on the 'test' database\n");
++    mtr_tofile($bootstrap_sql_file, "INSERT INTO mysql.db VALUES ('%','test','','Y','Y','Y','Y','Y','Y','N','Y','Y','Y','Y','Y','Y','Y','Y','N','N','Y','Y');\n");
++    
++
+     # Add test data for timezone - this is just a subset, on a real
+     # system these tables will be populated either by mysql_tzinfo_to_sql
+     # or by downloading the timezone table package from our website

Modified: mysql-5.5/branches/unstable/debian/patches/series
===================================================================
--- mysql-5.5/branches/unstable/debian/patches/series	2013-09-27 01:34:04 UTC (rev 2242)
+++ mysql-5.5/branches/unstable/debian/patches/series	2013-09-27 01:59:41 UTC (rev 2243)
@@ -10,3 +10,6 @@
 versioned_symbols.patch
 fix-mips64el-ftbfs.patch
 fix-racey-rpltests.patch
+33_scripts__mysql_create_system_tables__no_test.patch
+41_scripts__mysql_install_db.sh__no_test.patch
+50_mysql-test__db_test.patch




More information about the Pkg-mysql-commits mailing list