MySQL is a very fast, multi-threaded, multi-user and robust SQL
(Structured Query Language) database server.
WWW: http://www.mysql.com/
- Alex Dupre
ale@FreeBSD.org
As previously advertised, complete removal of vulnerable ports that
no one has stepped up to deal with:
archivers/pecl-phar Vulnerable since 2011-01-13
comms/libsyncml Depends on devel/libsoup22, which is FORBIDDEN
databases/mysql323-server Vulnerable since 2006-10-29
databases/mysql323-client Vulnerable since 2006-10-29
databases/mysql323-scripts Vulnerable since 2006-10-29
databases/mysql40-server Vulnerable since 2006-10-29
databases/mysql40-client Vulnerable since 2006-10-29
databases/mysql40-scripts Vulnerable since 2006-10-29
databases/p5-DBD-mysql40
Depends on databases/mysql40-server, which is FORBIDDEN
deskutils/buoh Depends on devel/libsoup22, which is FORBIDDEN
deskutils/libopensync-plugin-syncml
(Only the first 15 lines of the commit message are shown above )
Mark FORBIDDEN the remaining ports that are vulnerable for more than
2 weeks according to portaudit (ranging from 23 days to 7 years).
The maintainers were notified by mail that this action would be taken
on 2011-09-03. (Ports for which maintainers responded have been/will be
dealt with separately.)
Also mark DEPRECATED ports that rely on the FORBIDDEN ports, and a few
ports that rely on those DEPRECATED ports.
Remove painful examples of foo="", with particular prejudice against
constructions that parse out to [ -z "$foo" ] && foo=""
These are bad examples that get copied and pasted into new code, so the
hope is that with less bad examples there will be less need for me to
bring this up in review.
In a few of these files all that were changed were comments so that next
time I search for these patterns I won't trip on the file for no reason.
In a few places, add $FreeBSD$
No functional changes, so no PORTREVISION bumps
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.
It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.
With help: marcus and kwm
Pointyhat-exp: a few times by pav
Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and
a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by: marcus
Approved by: portmgr
Move the USE_PERL5 definition for the scripts slave ports from the master
to the slave port, to move it before the inclusion of bsd.port.pre.mk.
Approved by: maintainer
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk
(Only the first 15 lines of the commit message are shown above )
Begin planning for de-orbit burn. This does not build with gcc4.2, and
the correct fix is to update to a modern version of MySQL.
While here, rip out obsolete 4.X cruft.
Hat: portmgr
Approved by: maintainer
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.
Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.
Preliminary documentation can be found at:
http://people.FreeBSD.org/~ade/autotools.txt
which is in the process of being SGMLized before introduction into the
Porters Handbook.
Light blue touch-paper. Run.
- Use the rcNG script to kill MySQL on deinstallation [1]
- Set the new sequence for finding my.cnf files [2]:
/etc, ${PREFIX}/etc, ${mysql_dbdir}
(default to: /etc/my.cnf, /usr/local/etc/my.cnf, /var/db/mysql/my.cnf)
- Add the possibility to specify additional command-line arguments
to be passed to mysqld_safe on startup
PR: ports/79166 [1], ports/79597 [2]
Submitted by: Sergey Prikhodko <sergey@network-asp.biz> [1],
Vasil Dimov <vd@datamax.bg> [2]
Update to 3.23.59 snapshot:
- Switch to rcNG
- Add the possibility to specify the database directory in rc.conf
- Move database creation from post-install stage into startup script
Whoa there, boy, that's a mighty big commit y'all have there...
Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".
For ports-in-waiting:
USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13
USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213
USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14
Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
- Completely restructure the port to follow other mysql* ports
(too many improvements to be listed here)
- Correctly support PTHREAD_LIBS/CFLAGS
- Use USE_GNOME=lthack
- Propagate DB_DIR in package [1]
- Use my @FreeBSD.org email address
- Bump PORTREVISION
PR: ports/24749 [1]
Submitted by: Tom Pavel <pavel@networkphysics.com> [1]
Approved by: nork (mentor/implicitly)
In a followup to ports/60559, Alex admitted to being the maintainer of all
the other mysql-(server|client) ports, and thus found himself volunteered
for this one as well. Of course, it may well be that he didn't run away
fast enough ... or that this release is probably the last in the 3.x series.
o Add CONFLICTS sections.
o Fix packages dependencies.
o portlint clean
o Correct typo in MASTER_SITES, Fix non-optimized build.
PR: ports/60559
Submitted by: Alex Dupre <sysadmin@alexdupre.com>
Protect against accidentally defining USE_MYSQL in the environment or
on the make(1) command line[1].
Unbreak mysql40-server's building on -CURRENT (-pthread)[2].
PR: 56252[1], 56925[2]
Submitted by: Clement Laforet <sheepkiller@cultdeadsheep.org> [1],
Alex Dupre <sysadmin@alexdupre.com> (maintainer) [2]
Security update to 3.23.58.
Fixed buffer overflow in password handling which could potentially
be exploited by MySQL users with ALTER privilege on the mysql.user
table to execute random code or to gain shell access with the UID
of the mysqld process.
The complete changelog can be found at:
http://www.mysql.com/doc/en/News-3.23.58.html
Approved by: marcus (portsmgr)
With my portmgr hat on, apply a fix discussed on current@ to fix the
build on -CURRENT. Also, reset maintainer to ports@ since dirk@ has been
inactive since 2003-02-06.
We finally have a threadsafe realpath(3) in 4.x and 5.x.
Remove problematic HAVE_BROKEN_REALPATH define, now we
have a fixed version. This allows usage of symlinks for
database paths again which was previously broken.
Bump portrevision.
Under FreeBSD 5.X, libstdc++ and libsupc++ in /usr/lib use FreeBSD
native (libc_r style) mutexes, thus some of the linked application
might indirectly try to pass native style mutexes to linuxthreads
pthread functions, either hanging at program startup or overwriting
data following the native style mutex. <tegge>
Reviewed by: tegge
-STABLE exits with signal 11 while connecting via TCP/IP if empty
prototypes are used. -CURRENT needs empty prototypes to build. Use
__FreeBSD_version to differentiate.
Set CXX to $CC on -STABLE again to get around stability problems
under heavy load.
Back out last commit. It was unapproved and inappropriate since it
breaks existing installations (very clever!).
An appropriate "fix" for this "problem" would be to look in both /etc
and ${PREFIX}/etc.
