Change log for mysql-5.5 package in Debian

mysql-5.5 (5.5.60-0+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Imported Upstream version 5.5.60 to fix security issues:
    - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
    - CVE-2018-2755 CVE-2018-2761 CVE-2018-2771 CVE-2018-2773 CVE-2018-2781
      CVE-2018-2813 CVE-2018-2817 CVE-2018-2818 CVE-2018-2819
  * Don't install obsolete manpages.
    Do not try to install anymore obsolete manpages for mysql_client_test,
    mysql_client_test_embedded and mysqltest_embedded.

 -- Salvatore Bonaccorso <email address hidden>  Wed, 18 Apr 2018 22:28:36 +0200

mysql-5.5 (5.5.58-0+deb8u1) jessie-security; urgency=high

  * Imported upstream version 5.5.58 to fix security issues:
    - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
    - CVE-2017-10268 CVE-2017-10378 CVE-2017-10379 CVE-2017-10384
    (Closes: #878402)

 -- Lars Tangvald <email address hidden>  Tue, 17 Oct 2017 10:20:55 +0200

mysql-5.5 (5.5.55-0+deb8u1) jessie-security; urgency=high

  * Imported upstream version 5.5.55 to fix security issues:
    - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
    - CVE-2017-3302 CVE-2017-3305 CVE-2017-3308 CVE-2017-3309
    - CVE-2017-3329 CVE-2017-3453 CVE-2017-3456 CVE-2017-3461
    - CVE-2017-3462 CVE-2017-3463 CVE-2017-3464 CVE-2017-3600
    (Closes: #860544, #854713)
  * d/patches: refreshed 62_disable_tests.patch
  * d/patches: dropped fix_test_events_2.patch. Issue fixed upstream

 -- Lars Tangvald <email address hidden>  Tue, 18 Apr 2017 09:24:12 +0200

mysql-5.5 (5.5.53-0+deb8u1) jessie-security; urgency=high

  * Imported upstream version 5.5.53 to fix security issues:
    - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
    - CVE-2016-7440 CVE-2016-5584
    (Closes: #841050)
  * Packaging will now create /var/lib/mysql-files, as server will now by
    default restrict all import/export operations to this directory. This
    can be changed using the secure-file-priv config option.

 -- Lars Tangvald <email address hidden>  Mon, 17 Oct 2016 10:49:23 +0200

mysql-5.5 (5.5.50-0+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Imported Upstream version 5.5.50 to fix security issues:
    - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
    - CVE-2016-3477 CVE-2016-3521 CVE-2016-3615 CVE-2016-5440

 -- Salvatore Bonaccorso <email address hidden>  Thu, 21 Jul 2016 07:03:59 +0200

mysql-5.5 (5.5.49-0+deb8u1) jessie-security; urgency=high

  * Imported Upstream version 5.5.49 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html
    - CVE-2016-0640 CVE-2016-0641 CVE-2016-0642 CVE-2016-0643 CVE-2016-0644
      CVE-2016-0646 CVE-2016-0647 CVE-2016-0648 CVE-2016-0649 CVE-2016-0650
      CVE-2016-0666 CVE-2016-2047 
    (Closes: #821100)

 -- Lars Tangvald <email address hidden>  Mon, 18 Apr 2016 07:53:29 +0200

mysql-5.5 (5.5.47-0+deb7u1) wheezy-security; urgency=high

  * Imported Upstream version 5.5.47 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
    - CVE-2016-0546 CVE-2016-0505 CVE-2016-0596 CVE-2016-0597 CVE-2016-0616
      CVE-2016-0598 CVE-2016-0600 CVE-2016-0606 CVE-2016-0608 CVE-2016-0609
    (Closes: #811428)
  * fix-test-suite-failure-caused-by-arbitrary-date-in-the-future-patch is no
    longer needed, as bug is fixed in new Upstream version

 -- Lars Tangvald <email address hidden>  Wed, 13 Jan 2016 12:53:26 +0100

mysql-5.5 (5.5.47-0+deb8u1) jessie-security; urgency=high

  * Imported Upstream version 5.5.47 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
    - CVE-2016-0546 CVE-2016-0505 CVE-2016-0596 CVE-2016-0597 CVE-2016-0616
      CVE-2016-0598 CVE-2016-0600 CVE-2016-0606 CVE-2016-0608 CVE-2016-0609
    (Closes: #811428)
  * fix-test-suite-failure-caused-by-arbitrary-date-in-the-future-patch is no
    longer needed, as bug is fixed in new Upstream version

 -- Lars Tangvald <email address hidden>  Wed, 13 Jan 2016 12:53:26 +0100

mysql-5.5 (5.5.46-0+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Imported Upstream version 5.5.46 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
    - CVE-2015-4792 CVE-2015-4802 CVE-2015-4815 CVE-2015-4816 CVE-2015-4819
      CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861
      CVE-2015-4870 CVE-2015-4879 CVE-2015-4913
    (Closes: #802564)
  * Add fix-test-suite-failure-caused-by-arbitrary-date-in-the-future.patch.
    Fix test suite failure caused by arbitrary date in the future.
    Thanks to Marc Deslauriers <email address hidden>

 -- Salvatore Bonaccorso <email address hidden>  Fri, 23 Oct 2015 13:35:23 +0200

mysql-5.5 (5.5.44-0+deb7u1) wheezy-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Imported Upstream version 5.5.44 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
    - CVE-2015-4752 CVE-2015-4737 CVE-2015-2648 CVE-2015-2643 CVE-2015-2620
      CVE-2015-2582
    (Closes: #792445)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 15 Jul 2015 22:01:14 +0200

mysql-5.5 (5.5.44-0+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Imported Upstream version 5.5.44 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
    - CVE-2015-4752 CVE-2015-4737 CVE-2015-2648 CVE-2015-2643 CVE-2015-2620
      CVE-2015-2582
    (Closes: #792445)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 15 Jul 2015 17:00:27 +0200

mysql-5.5 (5.5.43-0+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Imported Upstream version 5.5.43 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
    - CVE-2015-0499 CVE-2015-0501 CVE-2015-0505 CVE-2015-2571
    (Closes: #782645)
  * Update copyright years for upstream files

 -- Salvatore Bonaccorso <email address hidden>  Sat, 18 Apr 2015 06:07:42 +0200

mysql-5.5 (5.5.42-1) unstable; urgency=medium


  [ James Page ]
  * SECURITY UPDATE: Update to 5.5.41 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
    - CVE-2015-0411, CVE-2015-0382, CVE-2015-0381, CVE-2015-0432,
      CVE-2014-6568, CVE-2015-0374
    (Closes: #775881).
  * d/p/fix-func_math-test-failure.patch: Dropped, included upstream.

  [ Akhil Mohan ]
  * New upstream version, resolving date driven test failures in certs.
  * Example option in log_slow_queries d/additions/my.cnf is deprecated
    and replaced with options slow_query_log_file and slow_query_log.
    (Closes: #677222)

 -- James Page <email address hidden>  Mon, 09 Feb 2015 14:12:44 +0000

mysql-5.5 (5.5.40-0+wheezy1) wheezy-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * Imported Upstream version 5.5.40 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
    - CVE-2012-5615, CVE-2014-4274, CVE-2014-4287, CVE-2014-6463,
      CVE-2014-6464, CVE-2014-6469, CVE-2014-6478, CVE-2014-6484,
      CVE-2014-6491, CVE-2014-6494, CVE-2014-6495, CVE-2014-6496,
      CVE-2014-6500, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520,
      CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559
    (Closes: #765663)

 -- Salvatore Bonaccorso <email address hidden>  Sat, 18 Oct 2014 18:13:19 +0200

mysql-5.5 (5.5.40-1) unstable; urgency=medium


  * SECURITY UPDATE: Update to 5.5.40 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
    - CVE-2012-5615, CVE-2014-4274, CVE-2014-4287, CVE-2014-6463,
      CVE-2014-6464, CVE-2014-6469, CVE-2014-6478, CVE-2014-6484,
      CVE-2014-6491, CVE-2014-6494, CVE-2014-6495, CVE-2014-6496,
      CVE-2014-6500, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520,
      CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559
    (Closes: #765663, #769337)
  * d/p/fix-mysqlhotcopy-test-failure.patch: Add return code 255 to the list
    of allowable return codes for mysqlhotcopy tests.
  * d/rules: Enable parallel builds.

 -- James Page <email address hidden>  Mon, 24 Nov 2014 16:31:57 +0000

mysql-5.5 (5.5.38-0+wheezy1) wheezy-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * Imported Upstream version 5.5.38 fo fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
    - CVE-2014-2494
    - CVE-2014-4207
    - CVE-2014-4258
    - CVE-2014-4260
   (Closes: #754941)
  * Update copyright years for upstream files

 -- Salvatore Bonaccorso <email address hidden>  Sat, 19 Jul 2014 16:15:21 +0200

mysql-5.5 (5.5.39-1) unstable; urgency=medium


  * SECURITY UPDATE: Update to 5.5.38 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
    - CVE-2014-2494
    - CVE-2014-4207
    - CVE-2014-4258
    - CVE-2014-4260
  * New upstream release.
  * d/p/fix-func_math-test-failure.patch: Fix for failing func_math test
    (Closes: #753196, #746883).

 -- James Page <email address hidden>  Mon, 01 Sep 2014 13:20:20 +0100

mysql-5.5 (5.5.37-0+wheezy1) wheezy-security; urgency=medium


  * SECURITY UPDATE: Update to 5.5.37 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
    - CVE-2014-0001
    - CVE-2014-0384
    - CVE-2014-2419
    - CVE-2014-2430
    - CVE-2014-2431
    - CVE-2014-2432
    - CVE-2014-2436
    - CVE-2014-2438
    - CVE-2014-2440

 -- James Page <email address hidden>  Sat, 26 Apr 2014 18:43:56 +0100

mysql-5.5 (5.5.35+dfsg-0+wheezy1) wheezy-security; urgency=high


  * SECURITY UPDATE: Update to 5.5.35 to fix security issues:
    - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
    - CVE-2013-5891
    - CVE-2013-5908
    - CVE-2014-0386
    - CVE-2014-0393
    - CVE-2014-0401
    - CVE-2014-0402
    - CVE-2014-0412
    - CVE-2014-0420
    - CVE-2014-0437
  * d/p/debian/patches/33_scripts__mysql_create_system_tables__no_test.patch:
    Refreshed against new point release.
  * d/p/50_mysql-test__db_test.patch,
    d/p/62_disable_tests.patch: 
    Rework patches to enable plugin_auth, plugin_auth_qa_1 and plugin_auth_qa_2
    tests disable in 5.5.33+dfsg-0+wheezy1.
  * d/p/73_fix_rpl_deadlock_innodb_test.patch: Dropped - no longer required for
    this point release.
  * d/control: Update VCS fields for new git location.

 -- James Page <email address hidden>  Mon, 20 Jan 2014 11:13:56 +0000

mysql-5.5 (5.5.37-1) unstable; urgency=medium


  * SECURITY UPDATE: Update to 5.5.37 to fix security issues (Closes: #744910)
    - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
    - CVE-2014-0001 (Closes: #737596).
    - CVE-2014-0384
    - CVE-2014-2419
    - CVE-2014-2430
    - CVE-2014-2431
    - CVE-2014-2432
    - CVE-2014-2436
    - CVE-2014-2438
    - CVE-2014-2440
  * d/mysql-server-5.5.mysql.init: Fixup indentation on previous change
    (Closes: #739846).
  * d/rules: Always install apparmor profile, not just on Ubuntu
    (Closes: #736087).
  * d/control: Update for use of virtual-* packages for switching to/from
    MySQL alternatives.
  * d/watch,repack.*: Drop repackaging as upstream tarball is now DFSG
    compliant.

 -- James Page <email address hidden>  Thu, 24 Apr 2014 18:03:59 +0100

mysql-5.5 (5.5.35+dfsg-2) unstable; urgency=low


  [ Clint Byrum ]
  * d/mysql-server-5.5.mysql.init: Increase timeout to 30s (Closes: #736452).
  * d/mysql-server-5.5.postinst: Run mysql_install_db as mysql so tables are
    not created as root (Closes: #737224).

  [ Robie Basak ]
  * Re-sync relevant Ubuntu changes:
    - d/control: Make innotop usable without installing Suggests.
    - d/rules: Build with debug symbols.
    - d/{additions/my.cnf,mysql-server-5.5.mysql-server.logrotate}:
      Write an error log and logrotate it.
    - d/control,rules,apparmor-profile,mysql-server-5.5.files:
      Add AppArmor profile (Closes: #736087).
    - d/control: Move mailx from Recommends to Suggests.
    - d/control,d/tests/*: Add DEP-8 tests.
    - d/control: Re-add mysql-testsuite metapackage.

  [ James Page ]
  * d/control: Drop Nicholas from Uploaders, MIA (Closes: #739361).

 -- James Page <email address hidden>  Wed, 19 Feb 2014 12:37:01 +0000

mysql-5.5 (5.5.33+dfsg-0+wheezy1) wheezy-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * Imported Upstream version 5.5.33+dfsg
    - Fixes: CVE-2013-5807 CVE-2013-3839 CVE-2013-3812 CVE-2013-3809
      CVE-2013-3804 CVE-2013-3802 CVE-2013-3793 CVE-2013-3783 CVE-2013-1861
  * Update copyright years for upstream files
  * Add patches to disable the test database and anonymous access
    d/p/33_scripts__mysql_create_system_tables__no_test.patch,
    d/p/41_scripts__mysql_install_db.sh__no_test.patch,
    d/p/50_mysql-test__db_test.patch: Restored from mysql-5.1 package,
    inadvertently dropped in 5.5 transition. This removes the global
    anonymous access to the database which is a security concern.
  * CVE-2013-2162: Insecure creation of the credential file debian.cnf.
    Set umask to 066 before creating debian.cnf file. (Closes: #711600)
    (LP: #1185573)
  * Add 73_fix_rpl_deadlock_innodb_test.patch.
    Fixes failing rpl.rpl_deadlock_innodb test by ignoring warnings.
  * Disable more test after dropping the test databases
    plugin_auth, plugin_auth_qa_1 and plugin_auth_qa_2 fail as they need to
    operate on test_ databases. Some adaption to either the tests or
    50_mysql-test__db_test.patch might be further needed.
  * Add NEWS file to document changes needed to existing databases

 -- Salvatore Bonaccorso <email address hidden>  Sat, 14 Dec 2013 22:29:18 +0100

mysql-5.5 (5.5.35+dfsg-1) unstable; urgency=low


  [ Clint Byrum ]
  * Drop creation of insecure database permissions (Closes: #732306):
    - d/p/33_scripts__mysql_create_system_tables__no_test.patch,
      d/p/41_scripts__mysql_install_db.sh__no_test.patch,
      d/p/50_mysql-test__db_test.patch: Restored from mysql-5.1
      package, inadvertently dropped in 5.5 transition. This
      removes the global anonymous access to the database which
      is a security concern.

  [ James Page ]
  * New upstream release:
    - d/p/fix-racey-rpltests.patch: Dropped - no longer required.
    - d/p/50_mysql-test__db_test.patch: Add extra permissions to
      mysql-run-tests.pl for test_% accounts, fixing failing tests.
    - d/p/*: Refreshed patches.
    - SECURITY UPDATE:
      http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
      - CVE-2013-5891
      - CVE-2013-5908
      - CVE-2014-0386
      - CVE-2014-0393
      - CVE-2014-0401
      - CVE-2014-0402
      - CVE-2014-0412
      - CVE-2014-0420
      - CVE-2014-0437
  * Sync changes from NMU 5.5.33+dfsg-0+wheezy1:
    - d/NEWS: Add NEWS file to document changes needed to existing databases
      to drop insecure database permissions.
    - SECURITY UPDATE: Insecure creation of the credential file debian.cnf.
      - d/mysql-server-5.5.postinst: Set umask to 066 before creating
        debian.cnf file (Closes: #711600).
      - CVE-2013-2162
    - d/copyright: Update copyright years for upstream files.
  * d/control: Update VCS field for new git location.
  * d/control: Add myself to Uploaders.
  * d/*: Wrap and sort.
  * d/control: Bumped Standards-Version, no changes.

 -- James Page <email address hidden>  Sat, 18 Jan 2014 21:38:18 +0000

mysql-5.5 (5.5.33+dfsg-1) unstable; urgency=low


  * d/rules, d/control: Remove gcc-4.4 dependency and disable X86
    assembly in taocrypt. (Closes: #707280) (Closes: #678252)
  * d/patches/fix-mips64el-ftbfs.patch: Fix FTBFS on mips64el.
    (Closes: #719196) Thanks YunQuiang Su.
  * New upstream release.
    SECURITY UPDATE: CVE-2013-1861 CVE-2013-3783 CVE-2013-3793
    CVE-2013-3804 CVE-2013-3802 CVE-2013-3809 CVE-2013-3812
    (Closes: #706715) (Closes: #712730)
  * d/patches/work_around_failing_rpl_deadlock.patch: Test suite
    changes upstream have left some connections active. This
    patch fixes that. Thanks Kristian Nielsen!
  * d/patches/fix-racey-rpltests.patch: Fix from Oracle for failing
    tests.

 -- Clint Byrum <email address hidden>  Thu, 26 Sep 2013 09:14:47 -0700

mysql-5.5 (5.5.31+dfsg-0+wheezy1) stable-security; urgency=high


  * New upstream release.
    SECURITY UPDATE: CVE-2013-2375 CVE-2013-1544 CVE-2013-1532
    CVE-2013-2389 CVE-2013-2392 CVE-2013-2376 CVE-2013-1511
    CVE-2013-2391 CVE-2013-1502
    - Patches refreshed.
    - d/p/yassl.patch - dropped, applied upstream
    - d/p/debian-mdev382-fixup.patch: dropped, fixed upstream.
  * d/control: Updating Vcs-* fields to point at wheezy branch.

 -- Clint Byrum <email address hidden>  Wed, 08 May 2013 21:33:08 -0700

mysql-5.5 (5.5.31+dfsg-1) unstable; urgency=high


  * New upstream release.
    SECURITY UPDATE: CVE-2013-2375 CVE-2013-1544 CVE-2013-1532
    CVE-2013-2389 CVE-2013-2392 CVE-2013-2376 CVE-2013-1511
    CVE-2013-2391 CVE-2013-1502
    - Patches refreshed.
    - d/p/yassl.patch - dropped, applied upstream
    - d/p/debian-mdev382-fixup.patch: dropped, fixed upstream.

 -- Clint Byrum <email address hidden>  Mon, 06 May 2013 12:22:55 -0700

mysql-5.5 (5.5.30+dfsg-1.1) unstable; urgency=low


  * Non-maintainer upload.
  * d/p/yassl.patch - patch for CVE-2013-0169 (Closes: #699886)

 -- Michael Stapelberg <email address hidden>  Sun, 14 Apr 2013 12:45:53 +0200

mysql-5.5 (5.5.30+dfsg-1) unstable; urgency=low


  * New upstream release.
  * d/p/debian-mdev382-fixup.patch - patch from MariaDB, Thanks
    Kristian Nielsen. resolves  CVE-2012-4414 (Closes: #698068)

 -- Clint Byrum <email address hidden>  Sun, 24 Mar 2013 16:22:56 -0700

mysql-5.5 (5.5.29+dfsg-1) unstable; urgency=low


  [ Clint Byrum ]
  * d/mysql-server-5.5.postinst: Patch from Alex Bligh to fix privilege
    regression that was introduced in the switch from 5.1 to 5.5.
    (Closes: #692871)
  * New upstream release. (Closes: #695001) Refreshed patches.

 -- Nicholas Bamber <email address hidden>  Fri, 11 Jan 2013 15:29:53 +0000

mysql-5.5 (5.5.28+dfsg-1) unstable; urgency=low


  * New upstream release (resolves CVE-2012-3163, CVE-2012-3158, CVE-2012-3177,
    CVE-2012-3147, CVE-2012-3166, CVE-2012-3173, CVE-2012-3144, CVE-2012-3150,
    CVE-2012-3180, CVE-2012-3149, CVE-2012-3156, CVE-2012-3167, CVE-2012-3197,
    CVE-2012-3160) (Closes: #690778)
  * Removed debian/patches/73_mysqlcheck_tests.patch and
    debian/patches/2_main_openssl_1.patch as they did not apply cleanly and did
    not seem to be required any longer
  * Refreshed patches and updated headers:
    - debian/patches/73_mysqlcheck_tests.patch
    - debian/patches/94_spelling.patch
    - debian/patches/70_mysql_va_list.patch

 -- Nicholas Bamber <email address hidden>  Sun, 28 Oct 2012 09:22:24 +0000

mysql-5.5 (5.5.24+dfsg-9) unstable; urgency=low


  * Danish debconf translation (Closes: #684566)
  * Turkish debconf translation (Closes: #688294)
  * Loosened versioned dependency between mysql-server-5.5 and
    mysql-server-core-5.5, hopefully (Closes: #686803)
  * Restored zlib1g-dev (>= 1:1.1.3-5) as a build dependency
    and made the use of system libz explicit in debian/rules

 -- Nicholas Bamber <email address hidden>  Sat, 22 Sep 2012 15:01:11 +0100

mysql-5.5 (5.5.24+dfsg-8) unstable; urgency=low


  * Updated debian/copyright after analysis from development version
    of license-reconcile (Closes: #682311)
    - 'Comments' field to corrected to 'Comment'
    - Missing paragraphs for '*', 'debian/*' and for the mysqlreport
      and innotop scripts
    - Removed duplicate entries from Files listings
    - Added clause for files licensed under BSD (4-clause)
    - Clarified 'BSD (3 clause) GPL-2' as being 'BSD (3 clause) or GPL-2'
  * Updated Slovak debconf translation (Closes: #684644)

 -- Nicholas Bamber <email address hidden>  Tue, 04 Sep 2012 06:56:24 +0100

mysql-5.5 (5.5.24+dfsg-7) unstable; urgency=low


  * Updated Turkish debconf translation (Closes: #683733)
  * Use xz compression for binary packages (Closes: #684146)

 -- Nicholas Bamber <email address hidden>  Sat, 11 Aug 2012 21:02:27 +0100

mysql-5.5 (5.5.24+dfsg-6) unstable; urgency=low


  * Updated Czech debconf translation (Closes: #681711)

 -- Nicholas Bamber <email address hidden>  Sun, 29 Jul 2012 13:04:46 +0100

mysql-5.5 (5.5.24+dfsg-5) unstable; urgency=medium


  * Spanish debconf translation (Closes: #679053)

 -- Nicholas Bamber <email address hidden>  Sat, 14 Jul 2012 13:36:13 +0100

mysql-5.5 (5.5.24+dfsg-4) unstable; urgency=low


  * Made DFSG repacking mechanism independent of local installs, improved
    the documentation and added debian/README.source
  * Setting the gcc/g++ version to 4.4 on i386 platforms and removed
    patch disabling tests (Closes: #674267) but see #678252 for follow
    up from upstream
  * Danish debconf translation (Closes: #599483)

 -- Nicholas Bamber <email address hidden>  Thu, 21 Jun 2012 13:36:40 +0100

mysql-5.5 (5.5.25+dfsg-1) experimental; urgency=low


  * Fixing regular expression in tests to guard against build path containing
    the '+' symbol (Closes: #674210)
  * Setting the gcc/g++ version to 4.5 on i386 platforms (cf. #674267)
  * Removed main_openssl_1 patch
  * Set SYSTEM_TYPE according to GNU Build System
  * In an effort to get a better handle on test coverage, made test failures
    on kfreebsd-i386 fatal and re-enabled full tests on hurd, skipped certain
    tests on kfreebsd and changed disabled tests to selectively skipped tests
  * Updated French translation (Closes: #674025)
  * Updated Dutch translation (Closes: #674124)
  * Updated Russian translation (Closes: #674189)
  * Updated Portuguese translation (Closes: #674953)
  * Updated Swedish translation (Closes: #675108)
  * Updated German translation (Closes: #675766)
  * Migrated libmysqlclient-dev, mysql-client-5.5, mysql-server-core-5.5
    and mysql-server-5.5 off dh_movefiles
  * Removed dh_movefiles override
  * Rewrote libmysqlclient_r linking stuff to generate
    ephemeral dh_link files so that the hack is more comprehensible
  * Stopped attempts to install non-existent files for libmysqlclient-dev
    and mysql-server-5.5
  * Added --fail-missing to dh_install to catch executables not being installed
  * Distributed unused resources amongst packages appropriately
  * Added fixes to mop up various permissions issues in auto-install rule
  * Enhanced documentation around the source package and the reasons for it
    being arch:any
  * Removed source cruft: debian/additions/*.1 (apart from mysqlreport.1)
  * Restored zlib1g-dev build dependency pending further investigation
  * Removed the numerical prefix from the patch files
  * Applied fix-mysqldump-test.patch from Ubuntu
  * Applied mysql-testsuite and mysql-client-core-5.5 package definitions
    from Ubuntu
  * Located and installed upstream changelog
  * Removed doxygen-latex, ghostscript as build dependency
    as these were needed only for the NDB docs
  * Added lintian overrides
    - spelling false positive: yuR
    - long lines in man pages that cannot be reformatted
    - missing symbols file (cf. #590905)
  * Added patch for hyphen/minus sign confusion
  * Dropped mailx to Suggests clause (Closes: #535496)
  * New upstream source
  * Refreshed patches
  * Standardized debian/watch and get-orig-source and made DFSG exclusion
    of Docs/mysql.info explicit (Closes: #673528)
  * Revert having libssl-dev as a build dependency and changed
    WITH_SSL option to 'bundled' from 'yes' (Closes: #590905)
    and (Closes: #673865)
  * Added patch to libmysql/CMakeLists.txt to restore symbol versioning
    and bumped dependency in shlibs (Closes: #660686)
  * Ensured that /etc/mysql/conf.d is installed as part of mysql-common
    so that client programs work without a co-located server (Closes: #672359)
  * Added versioned dependency on initscripts and revert /var/run
    to /run change (Closes: #676560)

 -- Nicholas Bamber <email address hidden>  Wed, 13 Jun 2012 16:09:54 +0100

mysql-5.5 (5.5.24+dfsg-3) unstable; urgency=high


  * Added versioned dependency on initscripts and revert /var/run
    to /run change (Closes: #676560)

 -- Nicholas Bamber <email address hidden>  Thu, 07 Jun 2012 23:29:32 +0100

mysql-5.5 (5.5.24+dfsg-2) unstable; urgency=low


  * Really bumped the version in shlibs

 -- Nicholas Bamber <email address hidden>  Mon, 04 Jun 2012 23:03:35 +0100

mysql-5.5 (5.5.24+dfsg-1) unstable; urgency=low


  * New upstream release. Fixes CVE-2012-2102 mysql DoS by authenticated user
  * Updated Portuguese translation (Closes: #674953)
  * Updated Swedish translation (Closes: #675108)
  * Updated German translation (Closes: #675766)
  * Refreshed spelling patch
  * Added patch to libmysql/CMakeLists.txt to restore symbol versioning
    and bumped dependency in shlibs (Closes: #660686)
  * Ensured that /etc/mysql/conf.d is installed as part of mysql-common
    so that client programs work without a co-located server (Closes: #672359)
  * Added versioned Breaks clause against amarok (cf. #675304)

 -- Nicholas Bamber <email address hidden>  Mon, 04 Jun 2012 18:17:04 +0100

mysql-5.5 (5.5.23+dfsg-2) unstable; urgency=low


  * Fixing regular expression in tests to guard against build path containing
    the '+' symbol (Closes: #674210)
  * Disabled certain SSL tests pending investigation (cf. #674267)
  * Updated French translation (Closes: #674025)
  * Updated Dutch translation (Closes: #674124)
  * Updated Russian translation (Closes: #674189)

 -- Nicholas Bamber <email address hidden>  Fri, 25 May 2012 23:38:16 +0100

mysql-5.5 (5.5.23+dfsg-1) unstable; urgency=low


  * Revert having libssl-dev as a build dependency and changed
    WITH_SSL option to 'bundled' from 'yes' (Closes: #590905)
    and (Closes: #673865)
  * Standardized debian/watch and get-orig-source and made DFSG exclusion
    of Docs/mysql.info explicit (Closes: #673528)
  * Located and installed upstream changelog

 -- Nicholas Bamber <email address hidden>  Tue, 22 May 2012 21:42:39 +0100

mysql-5.5 (5.5.23-2) unstable; urgency=low


  * Stopped overriding the -j build parameter (Closes: #512964)
  * Stopped testing for /proc filesystem. It is no longer used
    for determining the number of CPUs.
  * Removed unnecessary build dependencies:
    - procps as it is required by cmake, cf. #96768
    - zlib1g newer version required by cmake
    - libtool obsoleted by cmake
    - file required by debhelper
  * Migrated libmysqld-dev, libmysqld-pic, libmysqlclient18 to using
    dh_install rather than dh_movefiles
  * Changed /var/run to /run as required by Debian Policy 3.9.3 (9.1.1)
  * Raised standards version to 3.9.3
  * Moved '-e' from shebang line to explicit 'set -e' as requested by lintian
  * Restored ha_example.so to mysql-server-5.5 but added Breaks/Replaces
    clauses (cf. LP: #912487) and (Closes: #666721)
  * Added additional Breaks/Replaces clauses for other clashes:
    - mysql-server-5.5 overwrites perror from mysql-client-5.1
    - mysql-server-core-5.5 overwrites my_print_defaults from mysql-client-5.1

 -- Nicholas Bamber <email address hidden>  Tue, 08 May 2012 05:59:09 +0100

mysql-5.5 (5.5.23-1) experimental; urgency=low


  * Added patch to test suite to accept socket paths less than 40
    characters long (Closes: #540153)
  * Disabled some more tests including some reported by Olaf van der Speck
  * Removed ha_example.so from mysql-server-5.5 install (Closes: #666721)
  * New upstream release: unspecified security issues CVE-2012-1697,
    CVE-2012-1696 
  * Added patch to correct spelling mistakes: preceeding -> preceding

 -- Nicholas Bamber <email address hidden>  Thu, 03 May 2012 18:03:34 +0100

mysql-5.5 (5.5.20-1) experimental; urgency=low


  [ Guillaume Plessis ]
  * d/rules: Enabling ARCHIVE, BLACKHOLE, and FEDERATED engines.
    (Closes: #649484)
  * d/rules: Turn off embedded libedit/readline.(Closes: #659566)

  [ Clint Byrum ]
  * New Upstream Release
  * d/copyright: rearranging to have standalone license paragraphs
    silencing lintian complaints about missing paragraphs.
  * d/mysql-client-5.5.files: add mysql_plugin
  * d/rules, d/control: 5.5.20 Fixes segfault on tests with gcc 4.6,
    change compiler back to system default.
  * Sync changes back from Ubuntu:
      * d/control: need to also break mysql-client-core-5.1 and
        mysql-server-core-5.1 as well so that apt knows not to
        remove mysql-server/mysql-client.
      * d/control: convert mysql-server back to a meta-package
      * d/control: convert mysql-client back to a meta-package as well.
      * d/patches/72_fix_standalone_tests.patch: fix testsuite so it
        will run all tests when run from system /usr/lib/mysql-testsuite
        directory.
        5.1 is removed from the archive.
      * d/control: mysql-common includes configuration items that only
        work on mysql 5.5, so adding Breaks: for client and server 5.1.
        This will make mysql-server-5.1 and mysql-client-5.1 
        uninstallable which is actually desired.
      * d/patches/71_disable_rpl_tests.patch: disables this test until
        Ubuntu bug #894146 can be triaged.
      * d/mysql-client-5.5.files: add missing mysql_plugin
      * d/libmysqlcient18.files,libmysqlclient-dev.files,d/rules: re-add
        libmysqlclient_r. In hindsight, removing it was not a productive
        change.
      * d/libmysqlclient-dev.files: ship entire contents of include dir,
        some of these files are included internally by others in the 
        main dir.
      * d/patches/70_mysql_va_list.patch: cherry pick patch from
        upstream bug tracker to fix ARM build failure. (LP: #700982)

  [ Nicholas Bamber ]
  * Added myself to Uploaders
  * Added libssl-dev as a build dependency and patched main.openssl_1 test
    so that it works with that library (Closes: #660799)
  * Added patch to provide cmake options for GNU/Hurd (Closes: #651002)
    and tweaked debian/rules so that only 'make test' is run on Hurd.
  * Tweaked debian/rules to make build logs verbose (Closes: #651003)
  * Refreshed patches - and added a new patch to disable a further flurry
    of failing tests
  * Switched on native AIO in linux builds (Closes: #659565)
  * Numerous minor changes to improve lintian cleanliness (Closes: #663354)
    - Added dh_lintian lines to debian/rules to ensure that lintian
      overrides take effect and removed old commented out lines
    - Clarified Hurd procps dependency in debian/control
    - Rewrote short description of the libmysqld-pic package to be more accurate
    - Depersonalised long description of mysql-client
    - Removed dependencies relating to mysql-common-4.1
    - Tightened Breaks clauses for mysql-common
    - Removed duplicate entry from Replaces clauses for mysql-server-core-5.5
    - Rexpressed Conflicts clause as versioned dependency
      for mysql-testsuite-5.5
    - Added DEP-5 header fields to two patches
    - Refreshed and commented all lintian overrides and added override
      concerning lack of upstream changelog to all packages
    - Cleaned up debian/copyright
      * upgraded to latest version of DEP-5
      * encoding issues
      * out of date FSF address
      * Updated License short name from "PD" to "public-domain"
  * Converted to short form debhelper rules
    - Renamed stamp files to end in '-stamp' so that they are cleaned up
      automatically by dh_clean
    - Removed commented out lines
    - Removed obsolete -DINSTALL_LIBDIR clause from pic build
    - Overrode dh_auto_install so that the rules only run once
    - Migrated mysql-source, mysql-testsuite, mysql-common from
    dh_movefiles to dh_install

 -- Nicholas Bamber <email address hidden>  Sat, 28 Apr 2012 15:02:16 +0100

mysql-5.5 (5.5.17-4) experimental; urgency=low


  * d/control: Pre-Depend on multiarch-support and misc:Pre-Depends.
    also bump debhelper Build-Dep for multiarch.
    d/compat: raise to 9 for multiarch support.

 -- Clint Byrum <email address hidden>  Thu, 17 Nov 2011 17:38:19 -0800

mysql-5.5 (5.5.17-1) experimental; urgency=low


  [Norbert Tretkowski]
  * New upstream release.
  * Fix empty libmysqld-pic package.
  * Run dh_apparmor on Ubuntu only.

  [Clint Byrum]
  * Rewrote debian/copyright file from scratch.

 -- Clint Byrum <email address hidden>  Tue, 08 Nov 2011 11:31:13 -0800