Security version bump for users unable to upgrade to 5.1 series. Will not be stabilized as not all vulerabilities are fixable in 5.0 series. Users should migrate to 5.1 series for full security coverage.

Package-Manager: portage-2.2.0_alpha43/cvs/Linux x86_64

3 files changed, 209 insertions, 2 deletions

diff --git a/dev-db/mysql/ChangeLog b/dev-db/mysql/ChangeLog
index aa1fe9d707cb..33097b72a723 100644
--- a/dev-db/mysql/ChangeLog
+++ b/dev-db/mysql/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for dev-db/mysql
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/dev-db/mysql/ChangeLog,v 1.579 2011/07/13 07:37:01 robbat2 Exp $
+# $Header: /var/cvsroot/gentoo-x86/dev-db/mysql/ChangeLog,v 1.580 2011/07/13 07:45:33 robbat2 Exp $
+
+*mysql-5.0.92 (13 Jul 2011)
+
+  13 Jul 2011; Robin H. Johnson <robbat2@gentoo.org> +mysql-5.0.92.ebuild:
+  Security version bump for users unable to upgrade to 5.1 series. Will not be
+  stabilized as not all vulerabilities are fixable in 5.0 series. Users should
+  migrate to 5.1 series for full security coverage.
 
 *mysql-5.1.58 (13 Jul 2011)
 *mysql-5.1.57 (13 Jul 2011)
diff --git a/dev-db/mysql/Manifest b/dev-db/mysql/Manifest
index 9ee82d847b92..005f6c971121 100644
--- a/dev-db/mysql/Manifest
+++ b/dev-db/mysql/Manifest
@@ -16,6 +16,7 @@ DIST mysql-5.0.87.tar.gz 22231820 RMD160 b6a6bf715e4b9b71d62ecb13d2e5b47b5380637
 DIST mysql-5.0.88.tar.gz 22932765 RMD160 a3ba4bd04e573b4a0bab073f36eec3ff44348ae6 SHA1 2dc7a462eaca1452eefd334888a6c40022deb352 SHA256 c7b0265134fae6bcb254ae9ae97f580849e4ac491c2bfe136632abe74cb2f84a
 DIST mysql-5.0.90.tar.gz 22299626 RMD160 634655530100e5c00bfab9e2c498efa8c5208baf SHA1 c637d0afed52de1e3326824afa954d1ffbcc7a2f SHA256 0b89829611fe749c4d0c6007c076f80881b9309e82019b8c61184b3b284543a1
 DIST mysql-5.0.91.tar.gz 22340514 RMD160 3aaa638172f6916d3698c5421b24a01647f7e9db SHA1 14a79138a1296ce6ebb681fceba622d870feba3e SHA256 4669abf059bcf97c2fc1f3ce678e83f738ffe2299bd893e1a3d31afbc682c754
+DIST mysql-5.0.92.tar.gz 22440590 RMD160 24a373a1b124acf39d0c0726e5cb6f47dc1bef08 SHA1 10fffc7672a469af4a7fd980922b04d7ba0143ba SHA256 223530c4cd6d45e2906e6c7d33615c5824816dfdb772d104f4165a483ea78a55
 DIST mysql-5.1.39.tar.gz 21968309 RMD160 255f643582bc5d59932d3a1719420fb9ea2dbcbe SHA1 29389e1af27ebe7d20e7e2637a8d89de35e34180 SHA256 341b35e76c7186805f791def382a37ecc8149fcb17cbd0dfd9cde1698babbd0b
 DIST mysql-5.1.44.tar.gz 23400457 RMD160 f98d25322893b422ee708d683ee73ec9e17ad40a SHA1 265fbca02b2ef62926e2845d5fdf394298eb3206 SHA256 15dfccb34082a633a3f1793c21c7bf1432bf009a35acef0068885b7b68ecb540
 DIST mysql-5.1.45.tar.gz 22457274 RMD160 2fd173ac4484ae7a742f06d8d0cdb1c807c02bba SHA1 2a34650dc1a7e056788882522211d07791e0b352 SHA256 7dc2fabbdd8ab1d2878ee749be9c56ffc9efe970f7f0f094aa94b18b3cd15a72
@@ -80,6 +81,7 @@ EBUILD mysql-5.0.90-r1.ebuild 5503 RMD160 2ab86e3ae0f7266a921e05e67d6495596c53ca
 EBUILD mysql-5.0.90-r2.ebuild 6056 RMD160 92164660b78ea728c8553d8efffff89e888a8ba0 SHA1 fbb9e8623ff47bb8e891052bb5737423b4e23496 SHA256 c4d106fe7b196e1a1b9d9baac96ace5eafc053b478fcc86067b8198e4eba8c78
 EBUILD mysql-5.0.90.ebuild 5500 RMD160 4d28f50d191a700bd203bfbfd5dbb0f2e50135aa SHA1 0a9022bf80098851b36a9e612dc73ff4f40b7feb SHA256 37c253c471a6b8ba82cfd15703322283c326b09a23f265cee55c155bb85dac17
 EBUILD mysql-5.0.91.ebuild 6583 RMD160 2f73169480c9e735ebefd11468e69856ef489a95 SHA1 e1d00b2dbd14fc7cd384c75fa2869c8699c62363 SHA256 c22bed980a05cb4687634d8fb107dffe0f73e49a3b21e76fb3cf3c2f0f4f7769
+EBUILD mysql-5.0.92.ebuild 6591 RMD160 cd6d8110d49fce89edaa19e3d241c6ce40350178 SHA1 f3af3164e3735a0892ff1dd28f0198749dafa27b SHA256 d23bfd838ee9a57240b42db20cf6f3fe1afb36b3aac9714a5d02fe1000e23459
 EBUILD mysql-5.1.39-r1.ebuild 6479 RMD160 ea4059dd427a4e0a6e6d25ae436795b191352529 SHA1 e4ef99339fb3bf01e525f5261449663974638f0a SHA256 e5858c2cb61e4cc6df2394101c54a84779e084f7c9bf4369b470e6a8abcd4848
 EBUILD mysql-5.1.44-r1.ebuild 6780 RMD160 7d59a927a3527cb40945b9b338e336225fea6b44 SHA1 571a66db3a3ef76cd70e0a82823193d80f53b609 SHA256 14f500007bb245cb57137f10fe89190a1159204641f170e5c2ed173698be4de5
 EBUILD mysql-5.1.44-r2.ebuild 7387 RMD160 4c705b7c52d2dc09de9e0782ee1a883fef628bc2 SHA1 1bd252cd66658326f7a8be289654db40d1785a31 SHA256 036edafcea01b25deea4611cd4b1eb2760210b831eff28f31221f8effe5b7b04
@@ -102,5 +104,5 @@ EBUILD mysql-5.1.57.ebuild 8715 RMD160 f086ab37e0230cc1187d06073a261664b4b5e38e
 EBUILD mysql-5.1.58.ebuild 8715 RMD160 4305acc12217685c7f32066067b216215cc96772 SHA1 41bfa19a00638c3ec92ebbb893be1a2423da764a SHA256 f357e63db8d923b463e4de55272d63afbf49f611830461122f24162cf61c1790
 EBUILD mysql-5.4.3_beta.ebuild 6675 RMD160 d8684e092a0200a3583c669a73471b9fcb6fe4f6 SHA1 e2829c54379498f5b0b4b2272fac599f87fd1f1f SHA256 9d62a845db7bb3752f78f2814858c7ab4f3efc70fa9a1e16f935b5a4dee8face
 EBUILD mysql-5.5.1_alpha_pre2.ebuild 6903 RMD160 dd85e75069e59ae77f5fccdd9fff994aaeb06899 SHA1 8a0f91a49b63681f428beb589512924d347cc643 SHA256 25cf50e56a99318309cd9f51d86695018d957dec53e7ef5eda7e9d2a3233d086
-MISC ChangeLog 110581 RMD160 45b554dac772d2ede5adba51b3d94e2dd75a4d87 SHA1 e7e74c136e5ca1a47469516a9f76553b6e2727d6 SHA256 24274a5606f20009959ec3c2ebccbb4dcb78fac9c9eb0c20dd30c2b17cf74f93
+MISC ChangeLog 110896 RMD160 55f05f7853e531cb64bfdac59b1b760227e02267 SHA1 780cea4e5cdb27fff2c5f5190760725bc15940c1 SHA256 3aa662e872225cbeff34d7d7021befd4d2adb233939472dfb45550ee6d442ba7
 MISC metadata.xml 1389 RMD160 711fe2927a95bff06abbba5209a1e03fd99ba7b5 SHA1 adaf717edeadad3ebe8e7b486d75477b2ec5433b SHA256 562726facccb1c1808b74c0e17f052ca03c92c0ada689375e527b2a5405a5a0a
diff --git a/dev-db/mysql/mysql-5.0.92.ebuild b/dev-db/mysql/mysql-5.0.92.ebuild
new file mode 100644
index 000000000000..4c1cbe80c4fd
--- /dev/null
+++ b/dev-db/mysql/mysql-5.0.92.ebuild
@@ -0,0 +1,198 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/dev-db/mysql/mysql-5.0.92.ebuild,v 1.1 2011/07/13 07:45:33 robbat2 Exp $
+
+MY_EXTRAS_VER="20110713-0702Z"
+EAPI=2
+# 5.0.91 tarball has wrong version number in the directory.
+#MY_SOURCEDIR='mysql-5.0.90'
+
+inherit toolchain-funcs mysql
+# only to make repoman happy. it is really set in the eclass
+IUSE="$IUSE"
+
+# REMEMBER: also update eclass/mysql*.eclass before committing!
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~sparc-fbsd ~x86-fbsd ~x86-freebsd ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~x64-solaris"
+
+# When MY_EXTRAS is bumped, the index should be revised to exclude these.
+EPATCH_EXCLUDE=''
+
+DEPEND="|| ( >=sys-devel/gcc-3.4.6 >=sys-devel/gcc-apple-4.0 )"
+RDEPEND=""
+
+# Please do not add a naive src_unpack to this ebuild
+# If you want to add a single patch, copy the ebuild to an overlay
+# and create your own mysql-extras tarball, looking at 000_index.txt
+
+# Official test instructions:
+# USE='berkdb -cluster embedded extraengine perl ssl community' \
+# FEATURES='test userpriv -usersandbox' \
+# ebuild mysql-X.X.XX.ebuild \
+# digest clean package
+src_test() {
+	# Bug #213475 - MySQL _will_ object strenously if your machine is named
+	# localhost. Also causes weird failures.
+	[[ "${HOSTNAME}" == "localhost" ]] && die "Your machine must NOT be named localhost"
+
+	emake check || die "make check failed"
+	if ! use "minimal" ; then
+		if [[ $UID -eq 0 ]]; then
+			die "Testing with FEATURES=-userpriv is no longer supported by upstream. Tests MUST be run as non-root."
+		fi
+		has usersandbox $FEATURES && eerror "Some tests may fail with FEATURES=usersandbox"
+		cd "${S}"
+		einfo ">>> Test phase [test]: ${CATEGORY}/${PF}"
+		local retstatus_ns
+		local retstatus_ps
+		local t
+		addpredict /this-dir-does-not-exist/t9.MYI
+
+		# Ensure that parallel runs don't die
+		export MTR_BUILD_THREAD="$((${RANDOM} % 100))"
+
+		# archive_gis really sucks a lot, but it's only relevant for the
+		# USE=extraengines case
+		case ${PV} in
+			5.0.42)
+			mysql_disable_test "archive_gis" "Totally broken in 5.0.42"
+			;;
+
+			5.0.4[3-9]|5.0.[56]*|5.0.70|5.0.87)
+			[ "$(tc-endian)" == "big" ] && \
+			mysql_disable_test \
+				"archive_gis" \
+				"Broken in 5.0.43-70 and 5.0.87 on big-endian boxes only"
+			;;
+		esac
+
+		# This was a slight testcase breakage when the read_only security issue
+		# was fixed.
+		case ${PV} in
+			5.0.54|5.0.51*)
+			mysql_disable_test \
+				"read_only" \
+				"Broken in 5.0.51-54, output in wrong order"
+			;;
+		esac
+
+		# Ditto to read_only
+		[ "${PV}" == "5.0.51a" ] && \
+			mysql_disable_test \
+				"view" \
+				"Broken in 5.0.51, output in wrong order"
+
+		# x86-specific, OOM issue with some subselects on low memory servers
+		[ "${PV}" == "5.0.54" ] && \
+			[ "${ARCH/x86}" != "${ARCH}" ] && \
+			mysql_disable_test \
+				"subselect" \
+				"Testcase needs tuning on x86 for oom condition"
+
+		# Broke with the YaSSL security issue that didn't affect Gentoo.
+		[ "${PV}" == "5.0.56" ] && \
+			for t in openssl_1 rpl_openssl rpl_ssl ssl \
+				ssl_8k_key ssl_compress ssl_connect ; do \
+				mysql_disable_test \
+					"$t" \
+					"OpenSSL tests broken on 5.0.56"
+			done
+
+		# New test was broken in first time
+		# Upstream bug 41066
+		# http://bugs.mysql.com/bug.php?id=41066
+		[ "${PV}" == "5.0.72" ] && \
+			mysql_disable_test \
+				"status2" \
+				"Broken in 5.0.72, new test is broken, upstream bug #41066"
+
+		# The entire 5.0 series has pre-generated SSL certificates, they have
+		# mostly expired now. ${S}/mysql-tests/std-data/*.pem
+		# The certs really SHOULD be generated for the tests, so that they are
+		# not expiring like this. We cannot do so ourselves as the tests look
+		# closely as the cert path data, and we do not have the CA key to regen
+		# ourselves. Alternatively, upstream should generate them with at least
+		# 50-year validity.
+		#
+		# Known expiry points:
+		# 4.1.*, 5.0.0-5.0.22, 5.1.7: Expires 2013/09/09
+		# 5.0.23-5.0.77, 5.1.7-5.1.22?: Expires 2009/01/27
+		# 5.0.78-5.0.90, 5.1.??-5.1.42: Expires 2010/01/28
+		#
+		# mysql-test/std_data/untrusted-cacert.pem is MEANT to be
+		# expired/invalid.
+		case ${PV} in
+			5.0.*|5.1.*)
+				for t in openssl_1 rpl_openssl rpl.rpl_ssl rpl.rpl_ssl1 ssl ssl_8k_key \
+					ssl_compress ssl_connect ; do \
+					mysql_disable_test \
+						"$t" \
+						"These OpenSSL tests break due to expired certificates"
+				done
+			;;
+		esac
+
+		# These are also failing in MySQL 5.0 for now, and are believed to be
+		# false positives:
+		#
+		# main.mysql_comment, main.mysql_upgrade:
+		# fails due to USE=-latin1 / utf8 default
+		#
+		# main.mysql_client_test:
+		# segfaults at random under Portage only, suspect resource limits.
+		case ${PV} in
+			5.0.*)
+			for t in main.mysql_client_test main.mysql_comments main.mysql_upgrade; do
+				mysql_disable_test  "$t" "False positives in Gentoo"
+			done
+			;;
+		esac
+
+		use profiling && use community \
+		|| mysql_disable_test main.profiling \
+			"Profiling test needs profiling support"
+
+		if [ "${PN}" == "mariadb" ]; then
+			for t in \
+				parts.part_supported_sql_func_ndb \
+				parts.partition_auto_increment_ndb ; do
+					mysql_disable_test $t "ndb not supported in mariadb"
+			done
+		fi
+
+		case $PV in
+			5.0.91)
+			for t in archive archive_gis archive-big \
+				federated_archive mysqldump-max \
+				; do
+					mysql_disable_test $t "Broken in 5.0.91"
+				done
+			;;
+		esac
+
+		# create directories because mysqladmin might make out of order
+		mkdir -p "${S}"/mysql-test/var-{ps,ns}{,/log}
+
+		# We run the test protocols seperately
+		emake test-ns force="--force --vardir=${S}/mysql-test/var-ns"
+		retstatus_ns=$?
+		[[ $retstatus_ns -eq 0 ]] || eerror "test-ns failed"
+		has usersandbox $FEATURES && eerror "Some tests may fail with FEATURES=usersandbox"
+
+		emake test-ps force="--force --vardir=${S}/mysql-test/var-ps"
+		retstatus_ps=$?
+		[[ $retstatus_ps -eq 0 ]] || eerror "test-ps failed"
+		has usersandbox $FEATURES && eerror "Some tests may fail with FEATURES=usersandbox"
+
+		# Cleanup is important for these testcases.
+		pkill -9 -f "${S}/ndb" 2>/dev/null
+		pkill -9 -f "${S}/sql" 2>/dev/null
+		failures=""
+		[[ $retstatus_ns -eq 0 ]] || failures="${failures} test-ns"
+		[[ $retstatus_ps -eq 0 ]] || failures="${failures} test-ps"
+		has usersandbox $FEATURES && eerror "Some tests may fail with FEATURES=usersandbox"
+		[[ -z "$failures" ]] || die "Test failures: $failures"
+		einfo "Tests successfully completed"
+	else
+		einfo "Skipping server tests due to minimal build."
+	fi
+}