Change logs for mysql-dfsg-5.0 source package in Dapper

  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.15) dapper-security; urgency=low
    
      * SECURITY UPDATE: denial of service via joins involving a table with a
        unique SET column
        - debian/patches/113_SECURITY_CVE-2010-3677.dpatch: improve logic in
          sql/item_cmpfunc.cc. Add tests to mysql-test/*.
        - CVE-2010-3677
      * SECURITY UPDATE: denial of service via TEMPORARY InnoDB tables with
        nullable columns
        - debian/patches/113_SECURITY_CVE-2010-3680.dpatch: check for null
          datatype in sql/ha_innodb.cc. Add tests to mysql-test/*.
        - CVE-2010-3680
      * SECURITY UPDATE: denial of service via alternate reads from two indexes
        on a table using the HANDLER interface
        - debian/patches/113_SECURITY_CVE-2010-3681.dpatch: check for the same
          index in sql/sql_handler.cc. Add tests to mysql-test/*.
        - CVE-2010-3681
      * SECURITY UPDATE: denial of service via use of EXPLAIN with certain
        queries
        - debian/patches/113_SECURITY_CVE-2010-3682.dpatch: improve conditional
          in sql/sql_select.cc. Add tests to mysql-test/*.
        - CVE-2010-3682
      * SECURITY UPDATE: denial of service via derived table materializing.
        - debian/patches/113_SECURITY_CVE-2010-3834.dpatch: handle temporary
          tables in sql/field.cc, sql/sql_select.*. Add tests to mysql-test/*.
        - CVE-2010-3834
      * SECURITY UPDATE: denial of service via pre-evaluation of LIKE
        predicates during view preparation.
        - debian/patches/113_SECURITY_CVE-2010-3836.dpatch: make sure we're not
          in view preparation mode in sql/item_cmpfunc.cc. Add tests to
          mysql-test/*.
        - CVE-2010-3836
      * SECURITY UPDATE: denial of service via use of GROUP_CONCAT() and
        WITH ROLLUP together.
        - debian/patches/113_SECURITY_CVE-2010-3837.dpatch: create a copy of
          the order structures in sql/item_sum.cc, sql/table.h. Add tests to
          mysql-test/*.
        - CVE-2010-3837
      * SECURITY UPDATE: denial of service via longblob and union or update
        with subquery.
        - debian/patches/113_SECURITY_CVE-2010-3838.dpatch: handle REAL_RESULT
          in sql/item_func.cc. Add tests to mysql-test/*.
        - CVE-2010-3838
      * SECURITY UPDATE: denial of service via PolyFromWKB() function and
        improper data.
        - debian/patches/113_SECURITY_CVE-2010-3840.dpatch: improve data
          handling in sql/spatial.cc. Add tests to mysql-test/*.
        - CVE-2010-3840
     -- Marc Deslauriers <email address hidden>   Tue, 09 Nov 2010 14:10:41 -0500
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.14) dapper-security; urgency=low
    
      * SECURITY UPDATE: privilege check bypass via crafted table name argument
        to COM_FIELD_LIST
        - debian/patches/111_CVE-2010-1848.dpatch: check table name in
          sql/sql_parse.cc, Add tests to tests/mysql_client_test.c.
        - CVE-2010-1848
      * SECURITY UPDATE: denial of service via large packets
        - debian/patches/110_CVE-2010-1849.dpatch: handle big packets in
          sql/sql_parse.cc, include/mysql_com.h, sql/net_serv.cc.
        - CVE-2010-1849
      * SECURITY UPDATE: arbitrary code execution via crafted table name
        argument to COM_FIELD_LIST
        - debian/patches/109_CVE-2010-1850.dpatch: check table name length in
          sql/sql_parse.cc.
        - CVE-2010-1850
      * SECURITY UPDATE: DROP TABLE privilege bypass via symlink attack
        - debian/patches/112_CVE-2010-1626.dpatch: check for symlinks in
          myisam/mi_delete_table.c.
        - CVE-2010-1626
     -- Marc Deslauriers <email address hidden>   Sun, 06 Jun 2010 23:45:00 -0400
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.12) dapper-security; urgency=low
    
      * SECURITY UPDATE: Cross-site scripting in the command-line client
        - debian/patches/108_CVE-2008-4456.dpatch: use xmlencode_print in
          client/mysql.cc, add test to mysql-test/*.
        - CVE-2008-4456
      * SECURITY UPDATE: format string vulnerabilities in the dispatch_command
        function
        - debian/patches/108_CVE-2009-2446.dpatch: use correct format string in
          sql/sql_parse.cc, add test to tests/mysql_client_test.c.
        - CVE-2009-2446
      * SECURITY UPDATE: denial of service via certain SELECT statements with
        subqueries and statements that use the GeomFromWKB function
        - debian/patches/108_CVE-2009-4019.dpatch: handle errors in
          sql/sql_select.cc, set correct null_value in sql/item_geofunc.cc, add
          tests to mysql-test/*.
        - CVE-2009-4019
      * SECURITY UPDATE: privilege restriction bypass via incorrect calculation
        of the mysql_unpacked_real_data_home value
        - debian/patches/108_CVE-2009-4030.dpatch: fix initialization order in
          sql/mysqld.cc.
        - CVE-2009-4030
     -- Marc Deslauriers <email address hidden>   Mon, 08 Feb 2010 09:03:38 -0500
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.11) dapper-security; urgency=low
    
      * SECURITY UPDATE: denial of service via an empty bit-string literal (b'')
        - debian/patches/106_SECURITY_CVE-2008-3963.dpatch: fix Item_bin_string::
          Item_bin_string() in sql/item.cc to parse an empty bit-string literal
          as an empty string.
        - CVE-2008-3963
      * SECURITY UPDATE: privilege circumvention via the creation of MyISAM
        tables using the DATA DIRECTORY and INDEX DIRECTORY options to overwrite
        existing table files in the data directory. This update is a complete
        fix for the three CVE numbers listed below. This fix alters table creation
        behaviour by disallowing the use of the MySQL data directory in DATA
        DIRECTORY and INDEX DIRECTORY options. (LP: #254129)
        - debian/patches/107_SECURITY_CVE-2008-4098.dpatch: Disallow use of MySQL
          data directory in DATA DIRECTORY and INDEX DIRECTORY options.
        - CVE-2008-2079
        - CVE-2008-4097
        - CVE-2008-4098
    
     -- Marc Deslauriers <email address hidden>   Mon, 10 Nov 2008 13:42:30 -0500
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.10) dapper-proposed; urgency=low
    
      * RELIABILITY UPDATE: fix for upstream bug #20908
      * debian/patches/105_upstream_20908.dpatch: fix MYSQLlex() in sql_lex.cc
        to ABORT_SYM on zero-length variable names
      * References
        LP: #217772
        http://bugs.mysql.com/bug.php?id=20908
    
     -- Jamie Strandboge <email address hidden>   Tue, 15 Apr 2008 16:28:38 -0400
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.9) dapper-security; urgency=low
    
      * Fix for upstream bug #20482: Creation of a view as a join of views or
        tables could fail if the views or tables are in different databases. This
        bug was introduced in the update for CVE-2007-2692, which had more
        restrictive privilege checks. (LP: #209699)
    
     -- Jamie Strandboge <email address hidden>   Tue, 01 Apr 2008 13:03:24 -0400
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.8) dapper-security; urgency=low
    
      * no change build for -security upload
    
    mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.7) dapper-proposed; urgency=low
    
      * SECURITY UPDATE: buffer overflow via ProcessOldClientHello() in
        handshake.cpp and input_buffer& operator>> in yassl_imp.cpp
      * SECURITY UPDATE: buffer overread in HASHwithTransform::Update in hash.cpp
      * debian/patches/99_SECURITY_CVE-2008-0226_0227.dpatch: properly verify
        length of input (LP: #186978). Note that while this patch is included,
        mysql on Ubuntu 6.06 is not compiled with yassl enabled.
      * SECURITY UPDATE: privilege escalation via crafted CREATE SQL SECURITY
        DEFINER VIEW and ALTER VIEW statements
      * debian/patches/100_SECURITY_CVE-2007-6303.dpatch: make sure lex->definer
        is non-NULL in sql_view.cc (LP: #185039). This patch also fixes upstream
        bug #21080, which was needed to keep VIEW definitions in sync.
      * SECURITY UPDATE: denial of service via crafted EXPLAIN SELECT FROM on the
        INFORMATION_SCHEMA table
      * debian/patches/101_SECURITY_CVE-2006-7232.dpatch: make sure
        thd->lex-describe is non-NULL in sql_select.cc (LP: #161127)
      * debian/patches/102_view_fix-now.dpatch: update view.test and view.result to
        use a static year instead of now(). These tests are not part of the build
        but helps with qa-regression-testing
      * SECURITY UPDATE: privilege escalation via SQL SECURITY INVOKER stored
        routines
      * debian/patches/103_SECURITY_CVE-2007-2692.dpatch: restore THD::db_access
        when returning from stored routine by performing privilege checks in the
        execution stage rather than the parsing stage. This patch also fixes
        upstream bug #18681, which was needed to properly check view security.
      * References
        CVE-2008-0226
        CVE-2008-0227
        CVE-2007-6303
        CVE-2006-7232
        CVE-2007-2692
        http://bugs.mysql.com/bug.php?id=27337
        http://bugs.mysql.com/bug.php?id=18681
        http://bugs.mysql.com/bug.php?id=21080
    
     -- Jamie Strandboge <email address hidden>   Wed, 19 Mar 2008 15:15:01 -0400
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.7) dapper-proposed; urgency=low
    
      * SECURITY UPDATE: buffer overflow via ProcessOldClientHello() in
        handshake.cpp and input_buffer& operator>> in yassl_imp.cpp
      * SECURITY UPDATE: buffer overread in HASHwithTransform::Update in hash.cpp
      * debian/patches/99_SECURITY_CVE-2008-0226_0227.dpatch: properly verify
        length of input (LP: #186978). Note that while this patch is included,
        mysql on Ubuntu 6.06 is not compiled with yassl enabled.
      * SECURITY UPDATE: privilege escalation via crafted CREATE SQL SECURITY
        DEFINER VIEW and ALTER VIEW statements
      * debian/patches/100_SECURITY_CVE-2007-6303.dpatch: make sure lex->definer
        is non-NULL in sql_view.cc (LP: #185039). This patch also fixes upstream
        bug #21080, which was needed to keep VIEW definitions in sync.
      * SECURITY UPDATE: denial of service via crafted EXPLAIN SELECT FROM on the
        INFORMATION_SCHEMA table
      * debian/patches/101_SECURITY_CVE-2006-7232.dpatch: make sure
        thd->lex-describe is non-NULL in sql_select.cc (LP: #161127)
      * debian/patches/102_view_fix-now.dpatch: update view.test and view.result to
        use a static year instead of now(). These tests are not part of the build
        but helps with qa-regression-testing
      * SECURITY UPDATE: privilege escalation via SQL SECURITY INVOKER stored
        routines
      * debian/patches/103_SECURITY_CVE-2007-2692.dpatch: restore THD::db_access
        when returning from stored routine by performing privilege checks in the
        execution stage rather than the parsing stage. This patch also fixes
        upstream bug #18681, which was needed to properly check view security.
      * References
        CVE-2008-0226
        CVE-2008-0227
        CVE-2007-6303
        CVE-2006-7232
        CVE-2007-2692
        http://bugs.mysql.com/bug.php?id=27337
        http://bugs.mysql.com/bug.php?id=18681
        http://bugs.mysql.com/bug.php?id=21080
    
     -- Jamie Strandboge <email address hidden>   Thu, 06 Mar 2008 07:53:05 -0500
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.6) dapper-security; urgency=low
    
      * SECURITY UPDATE: denial of service via crafted CONTAINS operation when
        using InnoDB
      * debian/patches/98_SECURITY_CVE-2007-5925.dpatch: make sure innodb returns
        error on unsupported operations (db0err.h, page0cur.h, ha_innodb.cc). Also
        updated mysqld_error.h, mysqld_ername.h and errmsg.txt for the new
        returned error
      * SECURITY UPDATE: privilege escalation using symlinks when using DATA
        DIRECTORY and INDEX DIRECTORY options via a RENAME TABLE statement
      * debian/patches/98_SECURITY_CVE-2007-5969.dpatch: fix for my_symlink2.c to
        properly check symlinks when performing a rename operation
      * SECURITY UPDATE: denial of service via SHOW TABLE STATUS query in
        federated engine
      * debian/patches/98_SECURITY_CVE-2007-6304.dpatch: fix for ha_federated.cc
        to to return error if the response doesn't have enough columns
      * SECURITY UPDATE: information disclosure when using CREATE TABLE LIKE
        statements
      * debian/patches/98_SECURITY_CVE-2007-3781.dpatch: fix to enforce access
        privileges (sql_parse.cc, handler.h, sql_yacc.yy)
      * debian/control: Build-Depends on bison
      * References
        CVE-2007-5925
        CVE-2007-5969
        CVE-2007-6304
        CVE-2007-3781
        LP #172260
    
     -- Jamie Strandboge <email address hidden>   Wed, 19 Dec 2007 12:52:42 -0500
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.5) dapper-security; urgency=low
    
      * SECURITY UPDATE: denial of service via crafted IF clause
      * debian/patches/SECURITY_CVE-2007-2583.dpatch: fix sql/item_cmpfunc.cc
        to verify res is not NULL
      * SECURITY UPDATE: privilege escalation
      * debian/patches/SECURITY_CVE-2007-2691.dpatch: fix sql/sql_parse.cc to
        make sure DROP privileges are required when using RENAME TABLE
        statements
      * SECURITY UPDATE: denial of service via crafted authentication
        request
      * debian/patches/SECURITY_CVE-2007-3780.dpatch: fix sql/sql_parse.cc to
        not overflow a signed char
      * SECURITY UPDATE: privilege escalation via views
      * debian/patches/SECURITY_CVE-2007-3782.dpatch: fix sql/sql_prepare.cc
        and sql/sql_update.cc to properly verify access privileges to
        external tables
      * SECURITY UPDATE: warn on startup if root mysql account has a blank
        password. debian/mysql-server-5.0.mysql.init: supply 'reset-password' and
        check for blank password.  Based on work by Soren Hansen.
      * References
        CVE-2007-2583
        CVE-2007-2691
        CVE-2007-3780
        CVE-2007-3782
        Launchpad #119075
    
     -- Jamie Strandboge <email address hidden>   Tue,  2 Oct 2007 14:46:02 -0400
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.4) dapper-proposed; urgency=low
    
      * Fixed BLOCKSIZE to BLOCK_SIZE in initscript. (LP #118523)
    
     -- Mathias Gug <email address hidden>   Tue, 24 Jul 2007 16:18:57 -0400
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.3) dapper-security; urgency=low
    
      * SECURITY UPDATE: denial of service via subselects.
      * debian/patches/46_CVE-2007-1420_subselect_dos.dpatch: backported from
        Debain upstream.
      * debian/rules: disabled debconf-updatepo for security update.
      * References
        http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414790
        CVE-2007-1420
    
     -- Kees Cook <email address hidden>   Thu, 15 Mar 2007 16:59:46 -0700
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.2) dapper-security; urgency=low
    
      * Fix CVE number in previous changelog and dpatch name.
    
     -- Martin Pitt <email address hidden>   Tue,  5 Sep 2006 10:35:26 +0200
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06.1) dapper-security; urgency=low
    
      * SECURITY UPDATE: Privilege escalation.
      * Add debian/patches/SECURITY_CVE-2006-3041.dpatch:
        - Add --{skip-}merge options to disable the MERGE engine.
        - This closes a potential pitfall when an user creates a merge table, and
          the admin revokes privileges to the original table without revoking
          privs to the merged table, too.
        - Patch ported from upstream BK commit.
        - References:
          CVE-2006-3041
          http://bugs.mysql.com/bug.php?id=15195
      * Note: This version is not vulnerable against the case sensitive database
        name comparison bug [CVE-2006-4226].
      * Add debian/patches/SECURITY_CVE-2006-4227.dpatch:
        - Routine arguments were evaluated in the security context of the routine
          itself, not in the caller's context. This could be exploited for
          privilege escalation in setuid functions.
        - Patch ported from Debian's 5.0.24-3 upload.
        - References:
          CVE-2006-4227
          http://bugs.mysql.com/bug.php?id=18630
    
     -- Martin Pitt <email address hidden>   Mon,  4 Sep 2006 14:37:59 +0000
  • mysql-dfsg-5.0 (5.0.22-0ubuntu6.06) dapper-security; urgency=low
    
      * SECURITY UPDATE: Bring in a new upstream release to resolve a SQL
        injection vulnerability with multibyte encodings (CVE-2006-2753)
      * This upload is based on Debian's 5.0.22-2 to also pull in a fix
        for a critical bug in the postinst with an existing config file.
    
    mysql-dfsg-5.0 (5.0.22-2) unstable; urgency=high
    
      * Fixed debian-sys-maint related bug in postinst (thanks to
        Jean-Christophe Dubacq). Closes: #369970
      * The last upload was a security patch (which I did not know as I
        uploaded before the announcement came). I now added the CVE id for
        reference and set urgency to high as the last entry did not.
    
    mysql-dfsg-5.0 (5.0.22-1) unstable; urgency=low
    
      * SECURITY: This upstream release fixes an SQL-injection with multibyte
        encoding problem. (CVE-2006-2753)
      * New upstream release.
      * Upstream fixes REPAIR TABLE problem. Closes: #354300
      * Upstream fixes problem that empty strings in varchar and text columns
        are displayed as NULL. Closes: #368663
    
    mysql-dfsg-5.0 (5.0.21-3ubuntu1) dapper; urgency=low
    
      * Redirect mysql_upgrade output to syslog, instead of littering the
        console, which appears to royally mess up debconf when I'm unlucky.
      * Merge with Debian's pending 5.0.21-4 release to get new debconf
        translations and the BLOCKSIZE fix for the free disk space check.
    
     -- Adam Conrad <email address hidden>   Fri, 16 Jun 2006 21:09:53 +1000
  • mysql-dfsg-5.0 (5.0.21-3ubuntu1) dapper; urgency=low
    
      * Redirect mysql_upgrade output to syslog, instead of littering the
        console, which appears to royally mess up debconf when I'm unlucky.
      * Merge with Debian's pending 5.0.21-4 release to get new debconf
        translations and the BLOCKSIZE fix for the free disk space check.
    
    mysql-dfsg-5.0 (5.0.21-4) UNRELEASED; urgency=low
    
      * Added "BLOCKSIZE=" to the diskfree check (thanks to Farzad FARID).
        Closes: #367027, #367083
      * Adjusted the /proc test in debian/rules from /proc/1 to /proc/self
        to make building on grsec systems possible (thanks to K. Rosenegger).
        Closes: #366824
      * Updated Russion Debconf translation (thanks to Yuriy Talakan).
        Closes: #367141
      * Updated Czech Debconf translation (thanks to Kiroslav Kure).
        Closes: #367160
      * Updated Galician Debconf translation (thanks to Jacobo Tarrio).
        Closes: #367384
      * Updated Swedish Debconf translation (thanks to Daniel Nylander).
        Closes: #368186
    
     -- Adam Conrad <email address hidden>   Tue, 23 May 2006 20:56:35 +1000
  • mysql-dfsg-5.0 (5.0.21-3) unstable; urgency=low
    
      * Fixed FTBFS problem which was caused by a patch that modifies Makefile.am
        as well as Makefile.in and was not deteced because my desktop was fast
        enough to patch both files within the same second and so fooled automake.
        (thanks to Blars Blarson for notifying me). Closes: #366534
    
     -- Adam Conrad <adconrad@0c3.net>   Wed,  10 May 2006 11:25:53 +0100
  • mysql-dfsg-5.0 (5.0.21-2) unstable; urgency=low
    
      * Fixed bug in postinst that did not correctly rewrite 
        /etc/mysql/debian.cnf (thanks to Daniel Leidert). 
        Closes: #365433, #366155
    
    mysql-dfsg-5.0 (5.0.21-1) unstable; urgency=high
    
      * SECURITY: New upstream release with some security relevant bugfixes:
        * "Anonymous Login Handshake - Information Leakage" (CVE-2006-1517)
        * "COM_TABLE_DUMP Information Leakage and Arbitrary command execution"
           (CVE-2006-1518)
        Closes: #365939, #365939
      * Added diskfree check to the init script (thanks to Tim Baverstock).
        Closes: #365460
      * First amd64 upload!
    
    mysql-dfsg-5.0 (5.0.20a-2) unstable; urgency=low
    
      * The new mysql-upgrade which is started from /etc/mysql/debian-start
        does now use the debian-sys-maint user for authentication (thanks to
        Philipp). Closes: #364991
      * Wrote patch debian/patches/43* which adds a password option to
        mysql_update. See MySQL bug #19400.
      * Added "Provides: libmysqlclient-dev" to libmysqlclient15-dev as I saw no
        obvious reasons against it (problems should be documented in
        debian/README.Maintainer!) (thanks to Olaf van der Spek). Closes: #364899
      * Updated Netherlands debconf translation (thanks to Vincent Zweije)
        Closes: #364464
      * Updated French debconf translation (thanks to Christian Perrier)
        Closes: #364401
      * Updated Danish debconf translation (thanks to Claus Hindsgaul)
        Closes: #365135
    
    mysql-dfsg-5.0 (5.0.20a-1) unstable; urgency=low
    
      * New upstream release.
      * Added the new mysql_upgrade script and added it to
        /etc/mysql/debian-start (thanks to Alessandro Polverini). 
        The script is currently very noise that is a known bug and will be
        fixed in the next release!
        Closes: #363458
      * No longer creates the "test" database. This actuallay had been tried
        to archive before (at least patches) exists but apparently was not the
        case in the last versions (thanks to Olaf van der Spek). Closes: #362126
      * Reformatted libmysqlclient15off.NEWS.Debian to changelog format
        (thanks to Peter Palfrader). Closes: #363062
    
    mysql-dfsg-5.0 (5.0.20-1) unstable; urgency=high
    
      * Upstream contains a fix for a nasty bug (MySQL#18153) that users 
        already experienced and that caused corrupted triggers after
        REPAIR/OPTIMIZE/ALTER TABLE statements.
        (thanks to Jerome Despatis for pointing out)
      * Added patch for the "updates on multiple tables is buggy after 
        upgrading from 4.1 to 5.0" problem which MySQL has been committed
        for the upcoming 5.0.21 release. Closes #352704
      * Added Netherlands debconf translation (thanks to Vincent Zweije).
        Closes: #360443
      * Added Galician debconf translation (thanks to Jacobo Tarrio).
        Closes: #361257
    
     -- Adam Conrad <adconrad@0c3.net>   Wed,  10 May 2006 08:07:00 +0100
  • mysql-dfsg-5.0 (5.0.19-3) unstable; urgency=high
    
      [ Christian Hammers ]
      * Fixed libmysqlclient15.README.Debian regarding package name changes
        (thanks to Leppo).
      * Moved libheap.a etc. back to /usr/lib/mysql/ as their names are just
        too generic. Closes: #353924
      [ Sean Finney ]
      * updated danish debconf translation, thanks to Claus Hindsgaul
        (closes: #357424).
      [ Adam Conrad ]
      * Send stderr from 'find' in preinst to /dev/null to tidy up chatter.
      * Backport patch for CVE-2006-0903 from the upcoming release to resolve
        a log bypass vulnerability when using non-binary logs (closes: #359701)
    
    mysql-dfsg-5.0 (5.0.19-2) unstable; urgency=medium
    
      * New upstream release.
      * Renamed package libmysqlclient15 to libmysqlclient15off due to
        binary incompatible changes.
        See /usr/share/doc/libmysqlclient15off/README.Debian
      * Updated Czech debconf translation (thanks to Miroslav Kure).
        Closes: #356503
      * Updated French debconf translation (thanks to Christian Perrier).
        Closes: #356332
      * Improved README.Debian (thanks to Olaf van der Spek). Closes: #355702
      * Fixed 5.0.18-8 changelog by saying in which package the NEWS.Debian
        file is (thanks to Ross Boylan). Closes: #355978
    
    mysql-dfsg-5.0 (5.0.19-1) experimental; urgency=medium
    
      * New upstream release.
      * Renamed package libmysqlclient15 to libmysqlclient15off.
        See /usr/share/doc/libmysqlclient15off/NEWS.Debian
      * Updated Czech debconf translation (thanks to Miroslav Kure).
        Closes: #356503
      * Updated French debconf translation (thanks to Christian Perrier).
        Closes: #356332
      * Improved README.Debian (thanks to Olaf van der Spek). Closes: #355702
      * Fixed 5.0.18-8 changelog by saying in which package the NEWS.Debian
        file is (thanks to Ross Boylan). Closes: #355978
    
    mysql-dfsg-5.0 (5.0.18-9) unstable; urgency=medium
    
      [ Christian Hammers ]
      * When using apt-get the check for left-over ISAM tables can abort the
        installation of mysql-server-5.0 but not prevent the mysql-server-4.1
        package from getting removed. The only thing I can do is reflect this
        in the Debconf notice that is shown and suggest to reinstall
        mysql-server-4.1 for converting. See: #354850
      * Suggests removing of /etc/cron.daily/mysql-server in last NEWS message
        (thanks to Mourad De Clerck). Closes: #354111
      * Added versioned symbols for kfreebsd and Hurd, too (thanks to Aurelien
        Jarno and Michael Bank). Closes: #353971
      * Added versioned symbols for kfreebsd, too (thanks to Aurelien Jarno).
        Closes: #353971
      [ Adam Conrad ]
      * Add 39_scripts__mysqld_safe.sh__port_dir.dpatch to ensure that the
        permissions on /var/run/mysqld are always correct, even on a tmpfs.
    
     -- Adam Conrad <adconrad@0c3.net>   Tue,  4 Apr 2006 15:23:18 +1000
  • mysql-dfsg-5.0 (5.0.18-8.1) dapper; urgency=low
    
      * Release cut from Debian MySQL SVN, not using an Ubuntu version
        as a not-so-subtle reminder that this should be overwritten with
        a sync as soon as syncs can happen and 5.0.18-9 is released.
      * Closes Malone bug #28460 relating to tmpfs breakage in dapper.
    
    mysql-dfsg-5.0 (5.0.18-9) UNRELEASED; urgency=low
    
      [ Christian Hammers ]
      * Added versioned symbols for kfreebsd, too (thanks to Aurelien Jarno).
        Closes: #353971
    
      [ Adam Conrad ]
      * Add 39_scripts__mysqld_safe.sh__port_dir.dpatch to ensure that the
        permissions on /var/run/mysqld are always correct, even on a tmpfs.
    
     -- Adam Conrad <email address hidden>   Fri, 24 Feb 2006 18:00:58 +1100
  • mysql-dfsg-5.0 (5.0.18-6) unstable; urgency=low
    
    
      * Added version comment (thanks to Daniel van Eeden). 
      * Added two patches to build on GNU/Hurd (thanks to Michael Bank).
        Closes: #348182
      * Abort upgrade if old and now unsupported ISAM tables are present
        (thanks to David Coe). Closes: #345895
    
     -- Christian Hammers <email address hidden>  Tue, 17 Jan 2006 19:25:59 +0100
  • mysql-dfsg-5.0 (5.0.18-4) unstable; urgency=low
    
    
      * Munge our dependencies further to smooth upgrades even more, noting
        that we really need 5.0 to conflict with 4.1, and stealing a page from
        the book of mysql-common, it doesn't hurt to hint package managers in
        the direction of "hey, this stuff is a complete replacement for 4.1"
      * Change the description of mysql-server and mysql-client to remove the
        references to it being "transition", and instead point out that it's
        the way to get the "current best version" of each package installed.
    
     -- Adam Conrad <adconrad@0c3.net>  Wed, 11 Jan 2006 11:39:45 +1100
  • mysql-dfsg-5.0 (5.0.18-3) unstable; urgency=low
    
    
      * Make the mysql-{client,server}-5.0 conflict against mysql-{client,server}
        versioned, so they can be installed side-by-side and upgrade properly.
      * Add myself to Uploaders; since I have access to the alioth repository.
    
     -- Adam Conrad <adconrad@0c3.net>  Tue, 10 Jan 2006 19:15:48 +1100
  • mysql-dfsg-5.0 (5.0.18-1ubuntu1) dapper; urgency=low
    
    
      * Stop building mysql-client-4.1 and mysql-server-4.1 packages from
        the mysql-dfsg-5.0 sources, as we might want to keep our old ones.
    
     -- Adam Conrad <email address hidden>  Mon,  9 Jan 2006 22:14:32 +1100