Bug 239272

Summary: databases/mysql80-server: Update to 8.0.17 (Fixes multiple CVE)
Product: Ports & Packages Reporter: Markus Kohlmeyer <rootservice>
Component: Individual Port(s)Assignee: Mahdi Mokhtari <mmokhi>
Status: Closed FIXED    
Severity: Affects Only Me CC: dvl, ish, joneum, zeising
Priority: --- Keywords: security
Version: LatestFlags: mmokhi: maintainer-feedback+
Hardware: Any   
OS: Any   
URL: https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html#AppendixMSQL
Attachments:
Description Flags
This patch is not complete. There are pkg-plist errors on mysql80-client. none

Comment 1 Dan Langille freebsd_committer freebsd_triage 2019-08-18 22:32:11 UTC
Created attachment 206680 [details]
This patch is not complete. There are pkg-plist errors on mysql80-client.
Comment 3 Niclas Zeising freebsd_committer freebsd_triage 2019-08-18 23:31:40 UTC
I got mysql80-client compiling and a working package.
My WIP can be found here: https://github.com/zeising/freebsd-ports/tree/zeising/mysql80/databases/mysql80-client

The server does not build yet.
Comment 4 Dan Langille freebsd_committer freebsd_triage 2019-08-19 12:40:52 UTC
(In reply to Niclas Zeising from comment #3)

I do not know how to grab a diff from that.
Comment 5 Mahdi Mokhtari freebsd_committer freebsd_triage 2019-08-19 18:20:03 UTC
Thank you both for your helps on it.
Recently I have been (am :-D) quite busy on my academic stuff (thesis, final internship, etc)...
I was testing my changes which were not complete, I'll look into the patches y'all posted (and also try to get a diff of the repo Niclas provided) to complete mine.
Maybe I can re-use some parts to get the -server part work too :)

Thanks again, for all helps (and sorry for my slow speed this recently)
Comment 6 Dan Langille freebsd_committer freebsd_triage 2019-08-19 21:03:07 UTC
(In reply to Mahdi Mokhtari from comment #5)
Your academic stuff is definitely more important.
Comment 7 commit-hook freebsd_committer freebsd_triage 2019-09-19 12:34:02 UTC
A commit references this bug:

Author: mmokhi
Date: Thu Sep 19 12:33:44 UTC 2019
New revision: 512334
URL: https://svnweb.freebsd.org/changeset/ports/512334

Log:
  databases/mysql80-{client, server}: Update to latest release 8.0.17
  This update includes security fixes on issues that are
  mentioned on upstream critical patch report.
  Further info:
  https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html#AppendixMSQL

  Delete upstream-merged patches
  Change other local-patches according upstream changes

  PR:		239272
  Reported by:	Markus Kohlmeyer <rootservice@gmail.com>
  Sponsored by:	EuroBSDCon 2019 DevSummit

Changes:
  head/databases/mysql80-client/Makefile
  head/databases/mysql80-client/files/patch-client_CMakeLists.txt
  head/databases/mysql80-client/files/patch-cmake_os_FreeBSD.cmake
  head/databases/mysql80-client/files/patch-libmysql_CMakeLists.txt
  head/databases/mysql80-client/files/patch-man_CMakeLists.txt
  head/databases/mysql80-client/files/patch-mysys__ssl_my__default.cc
  head/databases/mysql80-client/files/patch-mysys__ssl_my__md5.cc
  head/databases/mysql80-client/files/patch-support-files_CMakeLists.txt
  head/databases/mysql80-client/files/patch-utilities_CMakeLists.txt
  head/databases/mysql80-server/Makefile
  head/databases/mysql80-server/distinfo
  head/databases/mysql80-server/files/patch-client_CMakeLists.txt
  head/databases/mysql80-server/files/patch-cmake_os_FreeBSD.cmake
  head/databases/mysql80-server/files/patch-libmysql_CMakeLists.txt
  head/databases/mysql80-server/files/patch-libservices_CMakeLists.txt
  head/databases/mysql80-server/files/patch-man_CMakeLists.txt
  head/databases/mysql80-server/files/patch-mysys__ssl_my__default.cc
  head/databases/mysql80-server/files/patch-mysys__ssl_my__md5.cc
  head/databases/mysql80-server/files/patch-support-files_CMakeLists.txt
  head/databases/mysql80-server/pkg-plist
Comment 8 Dan Langille freebsd_committer freebsd_triage 2019-09-19 13:12:34 UTC
Thank you.