Hello community,
here is the log from the commit of package mariadb for openSUSE:Factory checked
in at 2016-02-11 12:32:19
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/mariadb (Old)
and /work/SRC/openSUSE:Factory/.mariadb.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mariadb"
Changes:
--------
--- /work/SRC/openSUSE:Factory/mariadb/mariadb.changes 2015-12-06
07:28:48.000000000 +0100
+++ /work/SRC/openSUSE:Factory/.mariadb.new/mariadb.changes 2016-02-11
12:32:20.000000000 +0100
@@ -1,0 +2,6 @@
+Tue Feb 2 13:13:35 UTC 2016 - kstreit...@suse.com
+
+- fix information leak via mysql-systemd-helper script
+ [CVE-2015-5969], [bnc#957174]
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ configuration-tweaks.tar.bz2 ++++++
++++++ mysql-patches.tar.bz2 ++++++
++++++ mysql-systemd-helper ++++++
--- /var/tmp/diff_new_pack.flCYBV/_old 2016-02-11 12:32:22.000000000 +0100
+++ /var/tmp/diff_new_pack.flCYBV/_new 2016-02-11 12:32:22.000000000 +0100
@@ -22,9 +22,11 @@
if [[ -n "$INSTANCE" && "x$INSTANCE" != "xdefault" ]]; then
opts="$(/usr/bin/my_print_defaults mysqld mysqld_multi
"$INSTANCE")"
tmp_opts="$opts"
+ config="/etc/my${INSTANCE}.cnf"
else
opts="$(/usr/bin/my_print_defaults mysqld)"
tmp_opts="$opts"
+ config="/etc/my.cnf"
fi
# Update local variables according to the settings from config
@@ -87,8 +89,8 @@
# Run protected MySQL accessible only though socket in our
directory
echo "Running protected MySQL... "
/usr/sbin/mysqld \
+ --defaults-file="$config" \
--user="$mysql_daemon_user" \
- $opts \
--skip-networking \
--skip-grant-tables \
--log-error="$protected/log_upgrade_run" \
@@ -144,7 +146,9 @@
}
mysql_start() {
- exec /usr/sbin/mysqld --user="$mysql_daemon_user" $opts
+ exec /usr/sbin/mysqld \
+ --defaults-file="$config" \
+ --user="$mysql_daemon_user"
}
# We rely on output in english at some points
