Subject: CVS commit: pkgsrc/databases
From: Adam Ciarcinski
Date: 2016-12-12 20:22:57
Message id: 20161212192257.E1D94FBA6@cvs.NetBSD.org

Log Message:
Changes 5.5.54:

Security Notes
--------------
Incompatible Change: These changes were made to mysqld_safe:
* Unsafe use of rm and chown in mysqld_safe could result in privilege \ 
escalation. chown now can be used only when the target directory is /var/log. An \ 
incompatible change is that if the directory for the Unix socket file is \ 
missing, it is no longer created; instead, an error occurs. Due to these \ 
changes, /bin/bash is required to run mysqld_safe on Solaris. /bin/sh is still \ 
used on other Unix/Linux platforms.
* The --ledir option now is accepted only on the command line, not in option files.
* mysqld_safe ignores the current working directory.

Other related changes:
* Initialization scripts that invoke mysqld_safe pass --basedir explicitly.
* Initialization scripts create the error log file only if the base directory is \ 
/var/log or /var/lib.
* Unused systemd files for SLES were removed.

Bugs Fixed

Files:
RevisionActionfile
1.56modifypkgsrc/databases/mysql55-client/Makefile.common
1.54modifypkgsrc/databases/mysql55-client/distinfo
1.46modifypkgsrc/databases/mysql55-server/PLIST