[debian-mysql] Bug#860544: Bug#860544: Security fixes from the April 2017 CPU

[Lars Tangvald]

Hi,


We've prepared and tested the update to MySQL 5.5.55 for Jessie. Debdiff output is attached.
Only packaging changes are one refreshed patch and one that is no longer needed (5.5.54 for Wheezy had an additional patch added, which is also no longer needed).

--
Lars
-------------- next part --------------
diff -r mysql-5.5-5.5.54/debian/changelog ../mysql-5.5/mysql-5.5/debian/changelog
0a1,13
> mysql-5.5 (5.5.55-0+deb8u1) jessie-security; urgency=high
> 
>   * Imported upstream version 5.5.55 to fix security issues:
>     - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
>     - CVE-2017-3302 CVE-2017-3305 CVE-2017-3308 CVE-2017-3309
>     - CVE-2017-3329 CVE-2017-3453 CVE-2017-3456 CVE-2017-3461
>     - CVE-2017-3462 CVE-2017-3463 CVE-2017-3464 CVE-2017-3600
>     (Closes: #860544)
>   * d/patches: refreshed 62_disable_tests.patch
>   * d/patches: dropped fix_test_events_2.patch. Issue fixed upstream
> 
>  -- Lars Tangvald <lars.tangvald at oracle.com>  Tue, 18 Apr 2017 09:24:12 +0200
> 
diff -r mysql-5.5-5.5.54/debian/patches/62_disable_tests.patch ../mysql-5.5/mysql-5.5/debian/patches/62_disable_tests.patch
4c4
< Last-Update: 2012-03-07
---
> Last-Update: 2017-04-18
6,10c6,10
< Index: mysql-5.5-5.5.31+dfsg/mysql-test/t/disabled.def
< ===================================================================
< --- mysql-5.5-5.5.31+dfsg.orig/mysql-test/t/disabled.def	2013-03-25 06:14:58.000000000 -0700
< +++ mysql-5.5-5.5.31+dfsg/mysql-test/t/disabled.def	2013-05-05 09:43:53.000000000 -0700
< @@ -15,3 +15,8 @@
---
> 
> --- mysql-5.5-5.5.55.orig/mysql-test/t/disabled.def
> +++ mysql-5.5-5.5.55/mysql-test/t/disabled.def
> @@ -14,3 +14,8 @@ read_many_rows_innodb    : Bug#11748886
>  sum_distinct-big         : Bug#11764126 2010-11-15 mattiasj was not tested
12d11
<  log_tables-big           : Bug#11756699 2010-11-15 mattiasj report already exists
Only in mysql-5.5-5.5.54/debian/patches: fix_test_events_2.patch
diff -r mysql-5.5-5.5.54/debian/patches/series ../mysql-5.5/mysql-5.5/debian/patches/series
16d15
< fix_test_events_2.patch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jessiedebdiff.txt.gz
Type: application/gzip
Size: 290044 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/attachments/20170419/391b9fa9/attachment-0001.bin>