------------------------------------------------------------
revno: 2928 [merge]
tags: clone-5.0.95-build
committer: Mattias Jonsson <mattias.jonsson@oracle.com>
branch nick: topush-5.0-sec
timestamp: Wed 2011-12-14 14:05:22 +0100
message:
  merge
    ------------------------------------------------------------
    revno: 2923.1.1
    committer: Mattias Jonsson <mattias.jonsson@oracle.com>
    branch nick: b12361113-50-sec
    timestamp: Mon 2011-12-12 14:07:02 +0100
    message:
      Bug#12361113: CRASH WHEN "LOAD INDEX INTO CACHE" WITH TOO
      SMALL KEY CACHE
      
      The server crashed on division by zero because the key cache was not
      initialized and the block length was 0 which was used in a division.
      
      The fix was to not allow CACHE INDEX if the key cache was not initiallized.
      Thus never try LOAD INDEX INTO CACHE for an uninitialized key cache.
      
      Also added some windows files/directories to .bzrignore.
------------------------------------------------------------
revno: 2927
committer: Tor Didriksen <tor.didriksen@oracle.com>
branch nick: 5.0-security
timestamp: Fri 2011-10-14 10:09:53 +0200
message:
  Bug#12563865 ROUNDED,TMP_BUF,DECIMAL_VALUE STACK CORRUPTION IN ALL VERSIONS >=5.0
  
  Buffer over-run on all platforms, crash on windows, wrong result on other platforms,
  when rounding numbers which start with 999999999 and have
  precision = 9 or 18 or 27 or 36 ...
------------------------------------------------------------
revno: 2926 [merge]
committer: Georgi Kodinov <Georgi.Kodinov@Oracle.com>
branch nick: merge-5.0-security
timestamp: Wed 2011-10-12 14:33:09 +0300
message:
  auto-merge mysql-5.0->mysql-5.0-security
    ------------------------------------------------------------
    revno: 2901.1.6
    committer: Alexander Nozdrin <alexander.nozdrin@oracle.com>
    branch nick: mysql-5.0
    timestamp: Fri 2011-07-22 11:45:15 +0400
    message:
      For for Bug#12696072: FIX OUTDATED COPYRIGHT NOTICES IN RUNTIME RELATED CLIENT
      TOOLS
      
      Backport a fix for Bug 57094 from 5.5.
      The following revision was backported:
      
      # revision-id: alexander.nozdrin@oracle.com-20101006150613-ls60rb2tq5dpyb5c
      # parent: bar@mysql.com-20101006121559-am1e05ykeicwnx48
      # committer: Alexander Nozdrin <alexander.nozdrin@oracle.com>
      # branch nick: mysql-5.5-bugteam-bug57094
      # timestamp: Wed 2010-10-06 19:06:13 +0400
      # message:
      #   Fix for Bug 57094 (Copyright notice incorrect?).
      #   
      #   The fix is to:
      #     - introduce ORACLE_WELCOME_COPYRIGHT_NOTICE define to have a single place
      #       to specify copyright notice;
      #     - replace custom copyright notices with ORACLE_WELCOME_COPYRIGHT_NOTICE
      #       in programs.
    ------------------------------------------------------------
    revno: 2901.1.5
    committer: Luis Soares <luis.soares@oracle.com>
    branch nick: mysql-5.0
    timestamp: Tue 2011-07-12 02:10:28 +0100
    message:
      BUG#12695969
      
      Follow-up patch that adds the newly added header file to
      Makefile.am noinst_HEADERS.
    ------------------------------------------------------------
    revno: 2901.1.4
    committer: Luis Soares <luis.soares@oracle.com>
    branch nick: mysql-5.0
    timestamp: Mon 2011-07-11 17:11:41 +0100
    message:
      BUG#12695969: FIX OUTDATED COPYRIGHT NOTICES IN REPLACTION
      CLIENT TOOLS
            
      The fix is to backport part of revision:
              
        - alexander.nozdrin@oracle.com-20101006150613-ls60rb2tq5dpyb5c
            
      from mysql-5.5. In detail, we add the oracle welcome notice
      header file proposed in the original patch and include/use it
      in client/mysqlbinlog.cc, replacing the existing and obsolete
      notice.
------------------------------------------------------------
revno: 2925
committer: Tatjana Azundris Nuernberg <tatjana.nuernberg@oracle.com>
branch nick: 50-11765687z
timestamp: Thu 2011-10-06 11:23:46 +0100
message:
  additional clean-up for 11765687
------------------------------------------------------------
revno: 2924
committer: Tatjana Azundris Nuernberg <tatjana.nuernberg@oracle.com>
branch nick: 50-11765687z
timestamp: Thu 2011-09-29 10:47:11 +0100
message:
  Bug#11765687 (MySQL58677): No privilege on table / view, but can know #rows / underlying table's name
  
  1 - If a user had SHOW VIEW and SELECT privileges on a view and
  this view was referencing another view, EXPLAIN SELECT on the outer
  view (that the user had privileges on) could reveal the structure
  of the underlying "inner" view as well as the number of rows in
  the underlying tables, even if the user had privileges on none of
  these referenced objects.
  
  This happened because we used DEFINER's UID ("SUID") not just for
  the view given in EXPLAIN, but also when checking privileges on
  the underlying views (where we should use the UID of the EXPLAIN's
  INVOKER instead).
  
  We no longer run the EXPLAIN SUID (with DEFINER's privileges).
  This prevents a possible exploit and makes permissions more
  orthogonal.
  
  2 - EXPLAIN SELECT would reveal a view's structure even if the user
  did not have SHOW VIEW privileges for that view, as long as they
  had SELECT privilege on the underlying tables.
  
  Instead of requiring both SHOW VIEW privilege on a view and SELECT
  privilege on all underlying tables, we were checking for presence
  of either of them.
  
  We now explicitly require SHOW VIEW and SELECT privileges on
  the view we run EXPLAIN SELECT on, as well as all its
  underlying views. We also require SELECT on all relevant
  tables. 
------------------------------------------------------------
revno: 2923
committer: Georgi Kodinov <Georgi.Kodinov@Oracle.com>
branch nick: mysql-5.0-security
timestamp: Wed 2011-08-17 13:13:44 +0300
message:
  changed the old @sun.com address of security trees.
------------------------------------------------------------
revno: 2922
committer: Tor Didriksen <tor.didriksen@oracle.com>
branch nick: 5.0-security-bug12406055set_real
timestamp: Mon 2011-07-18 09:06:59 +0200
message:
  Bug#12406055 post-push fix: ignore float output
------------------------------------------------------------
revno: 2921
committer: Tor Didriksen <tor.didriksen@oracle.com>
branch nick: 5.0-security-bug12406055set_real
timestamp: Fri 2011-07-15 14:07:38 +0200
message:
  Bug#12406055 BUFFER OVERFLOW OF VARIABLE 'BUFF' IN STRING::SET_REAL
  
  The buffer was simply too small.
  In 5.5 and trunk, the size is 311 + 31,
  in 5.1 and below, the size is 331
------------------------------------------------------------
revno: 2920 [merge]
committer: Georgi Kodinov <Georgi.Kodinov@Oracle.com>
branch nick: merge-5.0-security
timestamp: Thu 2011-07-07 14:27:20 +0300
message:
  weave merge of mysql-5.0->mysql-5.0-security
    ------------------------------------------------------------
    revno: 2901.1.3 [merge]
    committer: Sunanda Menon <sunanda.menon@oracle.com>
    branch nick: mysql-5.0
    timestamp: Wed 2011-07-06 11:36:39 +0200
    message:
      Merge from mysql-5.0.94-release
    ------------------------------------------------------------
    revno: 2901.1.2 [merge]
    committer: Kent Boortz <kent.boortz@oracle.com>
    branch nick: mysql-5.0
    timestamp: Thu 2011-06-30 21:27:04 +0200
    message:
      Updated/added copyright headers
        ------------------------------------------------------------
        revno: 2877.2.24
        committer: Vasil Dimov <vasil.dimov@oracle.com>
        branch nick: mysql-5.0
        timestamp: Wed 2011-06-29 14:28:30 +0300
        message:
          Bug #12696083 	FIX OUTDATED COPYRIGHT NOTICES IN INNODB RELATED CLIENT TOOLS
          
          Update copyright comment in innochecksum.
    ------------------------------------------------------------
    revno: 2901.1.1
    committer: Kent Boortz <kent.boortz@oracle.com>
    branch nick: mysql-5.0
    timestamp: Thu 2011-06-30 17:31:31 +0200
    message:
      Updated/added copyright headers
------------------------------------------------------------
revno: 2919 [merge]
committer: Georgi Kodinov <Georgi.Kodinov@Oracle.com>
branch nick: merge-5.0-security
timestamp: Thu 2011-06-16 12:20:14 +0300
message:
  auto-merge of version update from mysql-5.0 to mysql-5.0-security
    ------------------------------------------------------------
    revno: 2877.2.23
    committer: Karen Langford <karen.langford@oracle.com>
    branch nick: mysql-5.0
    timestamp: Fri 2011-06-10 18:12:18 +0200
    message:
      increase version number to 5.0.95
------------------------------------------------------------
revno: 2918
committer: Sunanda Menon <sunanda.menon@oracle.com>
branch nick: mysql-5.0-security
timestamp: Fri 2011-06-10 07:38:09 +0200
message:
  Raise version number after cloning 5.0.94
------------------------------------------------------------
revno: 2917 [merge]
tags: mysql-5.0.94, clone-5.0.94-build
committer: Georgi Kodinov <Georgi.Kodinov@Oracle.com>
branch nick: merge-5.0-security
timestamp: Tue 2011-05-10 16:49:13 +0300
message:
  weave merge of 5.0->5.0-security
    ------------------------------------------------------------
    revno: 2877.2.22 [merge]
    committer: Sunanda Menon <sunanda.menon@oracle.com>
    branch nick: mysql-5.0
    timestamp: Fri 2011-05-06 10:36:30 +0200
    message:
      Merge from mysql-5.0.93-release
