Your message dated Mon, 09 Jun 2008 15:17:58 +0000 with message-id <[EMAIL PROTECTED]> and subject line Bug#481154: fixed in mysql-dfsg-5.0 5.0.51a-7 has caused the Debian Bug report #481154, regarding Critical errors in debian-start script to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [EMAIL PROTECTED] immediately.) -- 481154: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481154 Debian Bug Tracking System Contact [EMAIL PROTECTED] with problems
--- Begin Message ---Package: mysql-server-5.0 The debian-start script (that supposedly checks for table errors) has critical errors if the database name contains a character that needs to be quoted in SQL, e.g. somedb-dev doesn't work, while `somedb-dev` does. The resulting errors look like this (one for *each* table in databases with such names): /etc/mysql/debian-start[2715]: ERROR 1064 (42000) at line 1: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-dev.news' at line 1 You may agree this is pretty critical for a server. This is the version I'm using: $ dpkg -l mysql-server-5.0 |grep ^ii ii mysql-server-5.0 5.0.51a-5 MySQL database server binaries The fix would be to escape the name appropriately. The attached patch fixes the issue. mvrgr, Wouter -- :wq mail [EMAIL PROTECTED] web http://uwstopia.nl--- /usr/share/mysql/debian-start.inc.sh.orig 2008-05-13 10:26:59.000000000 +0200 +++ /usr/share/mysql/debian-start.inc.sh 2008-05-13 10:26:52.000000000 +0200 @@ -16,8 +16,8 @@ # Checking for $? is unreliable so the size of the output is checked. # Some table handlers like HEAP do not support CHECK TABLE. tempfile=`tempfile` - LC_ALL=C $MYSQL -N -b -e 'select concat("select count(*) from ",TABLE_SCHEMA, - ".", TABLE_NAME) from information_schema.TABLES where ENGINE="MyISAM"' | \ + LC_ALL=C $MYSQL -N -b -e 'select concat("select count(*) from `",TABLE_SCHEMA, + "`.", TABLE_NAME) from information_schema.TABLES where ENGINE="MyISAM"' | \ xargs -i $MYSQL -N -q -e "{}" 2>&1 \ | perl -e '$_=join("", <>); s/^[^\n]+\n(error|note)\s+: The (handler|storage engine) for the table doesn.t support check\n//smg;print;' \ > $tempfile
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---Source: mysql-dfsg-5.0 Source-Version: 5.0.51a-7 We believe that the bug you reported is fixed in the latest version of mysql-dfsg-5.0, which is due to be installed in the Debian FTP archive: libmysqlclient15-dev_5.0.51a-7_amd64.deb to pool/main/m/mysql-dfsg-5.0/libmysqlclient15-dev_5.0.51a-7_amd64.deb libmysqlclient15off_5.0.51a-7_amd64.deb to pool/main/m/mysql-dfsg-5.0/libmysqlclient15off_5.0.51a-7_amd64.deb mysql-client-5.0_5.0.51a-7_amd64.deb to pool/main/m/mysql-dfsg-5.0/mysql-client-5.0_5.0.51a-7_amd64.deb mysql-client_5.0.51a-7_all.deb to pool/main/m/mysql-dfsg-5.0/mysql-client_5.0.51a-7_all.deb mysql-common_5.0.51a-7_all.deb to pool/main/m/mysql-dfsg-5.0/mysql-common_5.0.51a-7_all.deb mysql-dfsg-5.0_5.0.51a-7.diff.gz to pool/main/m/mysql-dfsg-5.0/mysql-dfsg-5.0_5.0.51a-7.diff.gz mysql-dfsg-5.0_5.0.51a-7.dsc to pool/main/m/mysql-dfsg-5.0/mysql-dfsg-5.0_5.0.51a-7.dsc mysql-server-5.0_5.0.51a-7_amd64.deb to pool/main/m/mysql-dfsg-5.0/mysql-server-5.0_5.0.51a-7_amd64.deb mysql-server_5.0.51a-7_all.deb to pool/main/m/mysql-dfsg-5.0/mysql-server_5.0.51a-7_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Norbert Tretkowski <[EMAIL PROTECTED]> (supplier of updated mysql-dfsg-5.0 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Thu, 05 Jun 2008 11:49:45 +0200 Source: mysql-dfsg-5.0 Binary: libmysqlclient15off libmysqlclient15-dev mysql-common mysql-client-5.0 mysql-server-5.0 mysql-server mysql-client Architecture: source all amd64 Version: 5.0.51a-7 Distribution: unstable Urgency: high Maintainer: Debian MySQL Maintainers <[EMAIL PROTECTED]> Changed-By: Norbert Tretkowski <[EMAIL PROTECTED]> Description: libmysqlclient15-dev - MySQL database development files libmysqlclient15off - MySQL database client library mysql-client - MySQL database client (meta package depending on the latest versi mysql-client-5.0 - MySQL database client binaries mysql-common - MySQL database common files mysql-server - MySQL database server (meta package depending on the latest versi mysql-server-5.0 - MySQL database server binaries Closes: 480292 480362 480525 480647 480940 481154 481303 484012 Changes: mysql-dfsg-5.0 (5.0.51a-7) unstable; urgency=high . [ Norbert Tretkowski ] * SECURITY: Fix for CVE-2008-2079: It was possible to circumvent privileges through the creation of MyISAM tables employing the DATA DIRECTORY and INDEX DIRECTORY options to overwrite existing table files in the MySQL data directory. Use of the MySQL data directory in DATA DIRECTORY and INDEX DIRECTORY is now disallowed. Patch from openSUSE 11.0, thanks to Michal Marek. (closes: #480292) * Fix build on non-linux systems, like hurd-i386. (closes: #480362) * Include symlinks for mysqlcheck. (closes: #480647) . [ Monty Taylor ] * Remove ndb_cpcd, as it is only for the NDB test suite and not useful as a public program. * Fix debian-start.inc.sh for table names with characters needing quotes. Thanks Felix Rublack! (closes: #480525, #481154, #481303, #484012) * Delete mysql-common.README.Debian. Nothing in it was relevant, and the useful information is in mysql-server anyway. (closes: #480940) * Remove a spurious HOME= in logrotate script. Checksums-Sha1: 57643d5239c48fd35e785aebdadcb25291c89001 1707 mysql-dfsg-5.0_5.0.51a-7.dsc eae09f182999f70bd8215e4a799397b556a80456 299989 mysql-dfsg-5.0_5.0.51a-7.diff.gz 7ffb9d13bf57a8a54d0d5369c20eaecc47760ab3 58532 mysql-common_5.0.51a-7_all.deb 8df20d214330d2d8ea262c8c2640a43581883523 52918 mysql-server_5.0.51a-7_all.deb c0a5b912e035ed1aff00392ef109d521ed94837f 50720 mysql-client_5.0.51a-7_all.deb 0fc0a9c02720f61ef021b0426616b07611d70f33 1903040 libmysqlclient15off_5.0.51a-7_amd64.deb d4ce46af7286c7c218d0d91f93b41c68e164a255 7585870 libmysqlclient15-dev_5.0.51a-7_amd64.deb af19870608a8d1ab910ca31dbb863f9031230e81 8205504 mysql-client-5.0_5.0.51a-7_amd64.deb 678aa1f41b27fd1158535eeebb4ede94f1cef931 27145444 mysql-server-5.0_5.0.51a-7_amd64.deb Checksums-Sha256: f5842259a650fac6bf89130ac6ef87d7d6f299346fec155397bf998f1751aaee 1707 mysql-dfsg-5.0_5.0.51a-7.dsc d07d5185a7b190d59587b7089d82d45e214a3627fc26cca4aac18596fcce5d03 299989 mysql-dfsg-5.0_5.0.51a-7.diff.gz 9ef3aa75b6e809b70fefb1cc8c56c8a7a291abf022a07c1502afa2c9fcb246b5 58532 mysql-common_5.0.51a-7_all.deb d883dee56daeb7bd79ba980d4ba0e1ec88e24015c684506a9ceba8e25210be11 52918 mysql-server_5.0.51a-7_all.deb 22cac98b62a24d638e535707e6fafdb9204576482654160e57094f9f11d7e2e9 50720 mysql-client_5.0.51a-7_all.deb 90ec8bb7701a37e72bf8b68153a0dc9f340c83f75556897bc81635a093fba124 1903040 libmysqlclient15off_5.0.51a-7_amd64.deb 14227ecfe87684c1b7973e1b4204ca23b028e6aba356dbb04e2b3173a4799b0d 7585870 libmysqlclient15-dev_5.0.51a-7_amd64.deb b1d06c3c4bad000068a51cfb1454720ca9370de7163abdb78b227a6144213f71 8205504 mysql-client-5.0_5.0.51a-7_amd64.deb b514df7a05efde5313fe13bd76914ba51af5ed8a38c1b930e6ffae9b41711111 27145444 mysql-server-5.0_5.0.51a-7_amd64.deb Files: d89b2a6c7506199c1871bdc698ebe9a4 1707 misc optional mysql-dfsg-5.0_5.0.51a-7.dsc 9c0bee7e11af2b6ab839ae4aba5a7df1 299989 misc optional mysql-dfsg-5.0_5.0.51a-7.diff.gz 0fd93935fb13f2d037f24d311cd8ad2a 58532 misc optional mysql-common_5.0.51a-7_all.deb d18928e60b2d4982cbb877be8c7f4e43 52918 misc optional mysql-server_5.0.51a-7_all.deb 75bb116851bc93a5d2a731ad1ec9a007 50720 misc optional mysql-client_5.0.51a-7_all.deb 5b59994bd58924f432f27ff49430f4f2 1903040 libs optional libmysqlclient15off_5.0.51a-7_amd64.deb 76061b0ccfe005dc42641f23947a15d5 7585870 libdevel optional libmysqlclient15-dev_5.0.51a-7_amd64.deb e08f320969cf95631ed1017e8d46555c 8205504 misc optional mysql-client-5.0_5.0.51a-7_amd64.deb e7104da281fce2826c89ba146da91ace 27145444 misc optional mysql-server-5.0_5.0.51a-7_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFITSSLr/RnCw96jQERArbeAJ0dOrzX7nzeU09tQDPihKCncS5tXACeIrV3 OUAe/RsgreYKkaHiylGgeAw= =PDj+ -----END PGP SIGNATURE-----
--- End Message ---
