Ubuntu
mysql-8.0 package

Sync mysql-8.0 8.0.33-2 (main) from Debian unstable (main)

Bug #2022960 reported by Lena Voytek
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
mysql-8.0 (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

Please sync mysql-8.0 8.0.33-2 (main) from Debian unstable (main)

Since the changes below are a bit difficult to parse with Debian and Ubuntu having been updated independently, I added a merge request too with better explanations of the diff - https://code.launchpad.net/~lvoytek/ubuntu/+source/mysql-8.0/+git/mysql-8.0/+merge/444119

Explanation of the Ubuntu delta and why it can be dropped:
  * Rebuild against latest icu
  * Rebuild against latest icu
  * SECURITY REGRESSION: Regression with PyMySQL (LP: #2003835)
    - d/p/revert-router-to-8.0.31/*.patch: Revert every patch that modified
      the router directory in version 8.0.32, except for the following:
      605df79542d, b806d2bbb2d, faabb6e7404, 1ae29236865, d03f34cd9fe.
    - debian/mysql-router-8.0.install: Removed destination_status files.
  * d/t/upstream: Skip main.regular_expressions_utf-8 upstream test since it
    fails on ppc64el (LP: #1999076)
  * debian/tests/upstream: disable main.derived_limit test that fails on
    s390x.
  * debian/tests/upstream: disable main.derived_limit test that fails on
    s390x.
  * Fix FTBFS on ppc64el
    - d/p/boost-1.76.0-fix_multiprecision_issue_419-ppc64le.patch:
      update gcc Intel intrinsic usage config in
      boost/boost_1_77_0/boost/multiprecision/cpp_int/intel_intrinsics.hpp.
  * d/mysql-server-8.0.postinst: Confirm mysqld shuts down with stop_server after
    initialization to avoid overlapping use of port 3306 (LP: #1921378)
  * d/a/source_mysql-8.0.py: Fix apport too many symbolic
    links report for my.cnf (LP: #1969369)
  * d/mysql-server-8.0.postinst: Increase stop_server timeout so shutdowns that
    last up to 3 minutes do not trigger apport (LP: #1899248)
  * d/mysql-server-8.0.postinst: Increase stop_server timeout so shutdowns that
    last up to 3 minutes do not trigger apport (LP: #1899248)
  * d/a/source_mysql-8.0.py: Improve apport hook
    - Update call signature for add_info() (LP: #1922413)
    - Skip non-existing conf dirs (LP: #1958641)
    - If /etc/mysql missing, ask confirmation (LP: #1922412)
    - Fix all lint/flakes warnings
      + python3 -m py_compile source_mysql-8.0.py
      + pyflakes3 source_mysql-8.0.py
      + pylint source_mysql-8.0.py
  * SECURITY UPDATE: Update to 8.0.27 to fix security issues
    - CVE-2021-2478, CVE-2021-2479, CVE-2021-2481, CVE-2021-35546,
      CVE-2021-35575, CVE-2021-35577, CVE-2021-35584, CVE-2021-35591,
      CVE-2021-35596, CVE-2021-35597, CVE-2021-35602, CVE-2021-35604,
      CVE-2021-35607, CVE-2021-35608, CVE-2021-35610, CVE-2021-35612,
      CVE-2021-35613, CVE-2021-35622, CVE-2021-35623, CVE-2021-35624,
      CVE-2021-35625, CVE-2021-35626, CVE-2021-35627, CVE-2021-35628,
      CVE-2021-35630, CVE-2021-35631, CVE-2021-35632, CVE-2021-35633,
      CVE-2021-35634, CVE-2021-35635, CVE-2021-35636, CVE-2021-35637,
      CVE-2021-35638, CVE-2021-35639, CVE-2021-35640, CVE-2021-35641,
      CVE-2021-35642, CVE-2021-35643, CVE-2021-35644, CVE-2021-35645,
      CVE-2021-35646, CVE-2021-35647, CVE-2021-35648
  * debian/rules: disable innodb_fts.mecab_utf8 test, it hasn't run
    successfully in a long time, but now gives an error.
  * debian/patches/fix_ppc64el_longdouble_ftbfs.patch: removed, no longer
    needed.
  * SECURITY UPDATE: Update to 8.0.26 to fix security issues
    - CVE-2021-2339, CVE-2021-2340, CVE-2021-2342, CVE-2021-2352,
      CVE-2021-2354, CVE-2021-2356, CVE-2021-2357, CVE-2021-2367,
      CVE-2021-2370, CVE-2021-2372, CVE-2021-2374, CVE-2021-2383,
      CVE-2021-2384, CVE-2021-2385, CVE-2021-2387, CVE-2021-2389,
      CVE-2021-2390, CVE-2021-2399, CVE-2021-2402, CVE-2021-2410,
      CVE-2021-2417, CVE-2021-2418, CVE-2021-2422, CVE-2021-2424,
      CVE-2021-2425, CVE-2021-2426, CVE-2021-2427, CVE-2021-2429,
      CVE-2021-2437, CVE-2021-2440, CVE-2021-2441
  * Fix test suite failures:
    - debian/rules,debian/tests/upstream: disable newly-failing
      main.slow_log test.
  * Package new upstream files:
    - debian/mysql-server-core-8.0.install: semisync_replica.so,
      semisync_source.so.
    - debian/mysql-testsuite-8.0.install: component_test_table_access.so,
      component_test_mysql_system_variable_set.so.
  * debian/patches/fix_ppc64el_longdouble_ftbfs.patch: disable long double
    test on ppc64el.
  * d/p/lp-1915275-fix-handling-of-SC_LEVEL1_DCACHE_LINESIZE.patch:
    removed, included in new version.
  * SECURITY UPDATE: Update to 8.0.26 to fix security issues
    - CVE-2021-2339, CVE-2021-2340, CVE-2021-2342, CVE-2021-2352,
      CVE-2021-2354, CVE-2021-2356, CVE-2021-2357, CVE-2021-2367,
      CVE-2021-2370, CVE-2021-2372, CVE-2021-2374, CVE-2021-2383,
      CVE-2021-2384, CVE-2021-2385, CVE-2021-2387, CVE-2021-2389,
      CVE-2021-2390, CVE-2021-2399, CVE-2021-2402, CVE-2021-2410,
      CVE-2021-2417, CVE-2021-2418, CVE-2021-2422, CVE-2021-2424,
      CVE-2021-2425, CVE-2021-2426, CVE-2021-2427, CVE-2021-2429,
      CVE-2021-2437, CVE-2021-2440, CVE-2021-2441
  * Fix test suite failures:
    - debian/rules,debian/tests/upstream: disable newly-failing
      main.slow_log test.
  * Package new upstream files:
    - debian/mysql-server-core-8.0.install: semisync_replica.so,
      semisync_source.so.
    - debian/mysql-testsuite-8.0.install: component_test_table_access.so,
      component_test_mysql_system_variable_set.so.
  * debian/patches/fix_ppc64el_longdouble_ftbfs.patch: disable long double
    test on ppc64el.
  * d/p/lp-1915275-fix-handling-of-SC_LEVEL1_DCACHE_LINESIZE.patch:
    removed, included in new version.
  * debian/patches/fix_path_mysql_keyring_encryption_test.patch: fix
    location of mysql_keyring_encryption_test binary.
  * debian/patches/disable_root_files.patch: disable files that require
    root privileges during tests.
  [ Frans Spiesschaert ]
  * Update nl.po translation file (Closes: #970039)
  [ Helge Kreutzmann ]
  * Update de.po translation file (Closes: #968847)
  [ Christian Ehrhardt ]
  * d/p/lp-1915275-fix-handling-of-SC_LEVEL1_DCACHE_LINESIZE.patch: unbreak
    mysql on riscv64 (LP: #1915275)
  [ Frans Spiesschaert ]
  * Update nl.po translation file (Closes: #970039)
  [ Helge Kreutzmann ]
  * Update de.po translation file (Closes: #968847)
  [ Christian Ehrhardt ]
  * d/p/lp-1915275-fix-handling-of-SC_LEVEL1_DCACHE_LINESIZE.patch: unbreak
    mysql on riscv64 (LP: #1915275)
  * No change rebuild with fixed ownership.
  * Add missing libzstd-dev on runtime dev package
    (Closes: #981905)
  * SECURITY UPDATE: Update to 8.0.22 to fix security issues
    - CVE-2019-14775, CVE-2020-14672, CVE-2020-14765, CVE-2020-14769,
      CVE-2020-14771, CVE-2020-14773, CVE-2020-14775, CVE-2020-14776,
      CVE-2020-14777, CVE-2020-14785, CVE-2020-14786, CVE-2020-14789,
      CVE-2020-14790, CVE-2020-14791, CVE-2020-14793, CVE-2020-14794,
      CVE-2020-14800, CVE-2020-14804, CVE-2020-14809, CVE-2020-14812,
      CVE-2020-14814, CVE-2020-14821, CVE-2020-14827, CVE-2020-14828,
      CVE-2020-14829, CVE-2020-14830, CVE-2020-14836, CVE-2020-14837,
      CVE-2020-14838, CVE-2020-14839, CVE-2020-14844, CVE-2020-14845,
      CVE-2020-14846, CVE-2020-14848, CVE-2020-14852, CVE-2020-14853,
      CVE-2020-14860, CVE-2020-14861, CVE-2020-14866, CVE-2020-14867,
      CVE-2020-14868, CVE-2020-14869, CVE-2020-14870, CVE-2020-14873,
      CVE-2020-14878, CVE-2020-14888, CVE-2020-14891, CVE-2020-14893
  * Removed patches included in new version:
    - debian/patches/fix_mariadb_charset_segfault.patch
    - debian/patches/fix_expired_test_certs.patch
  * debian/mysql-router.install: adjust path to sample_mysqlrouter.conf.
  * debian/mysql-router.install, debian/not-installed: added new files.
  * debian/libmysqlclient21.symbols: added new symbol.
All above changes were also fixed independently on Debian

Changelog entries since current mantic version 8.0.33-0ubuntu4:

mysql-8.0 (8.0.33-2) unstable; urgency=medium

  * d/t/upstream: Ignore upstream tests due to s390x failure (Closes: 1036803)
    Due to slight variation in the optimization of join statements on s390x, a
    few upstream tests fail as they show a cost slightly higher than expected.
    The tests include main.subquery_sj_all_bka_nobnl and
    main.subquery_sj_mat_bka_nobnl

 -- Lena Voytek <email address hidden> Thu, 25 May 2023 10:20:02 -0700

mysql-8.0 (8.0.33-1) unstable; urgency=medium

  [ Lena Voytek ]
  * Imported upstream version 8.0.33 to fix security issues
    - https://www.oracle.com/security-alerts/cpuapr2023.html#AppendixMSQL
    - CVE-2023-21982 CVE-2023-21980 CVE-2023-21977 CVE-2023-21976
      CVE-2023-21972 CVE-2023-21966 CVE-2023-21962 CVE-2023-21955
      CVE-2023-21953 CVE-2023-21947 CVE-2023-21946 CVE-2023-21945
      CVE-2023-21940 CVE-2023-21935 CVE-2023-21933 CVE-2023-21929
      CVE-2023-21920 CVE-2023-21919 CVE-2023-21911
    Upstream release notes:
    - https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html
    (Closes: #1034719)
  * debian/mysql-testsuite-8.0.install: Added new files
  * d/p/mysql_secure_installation-remove-root-pw-creation.patch: Fix
    mysql_secure_installation by removing root password creation (LP: #1980466)

  [ Marc Deslauriers ]
  * Fix crash on startup on armhf (LP: #2019203)
    - debian/patches/revert-be8348a7.patch: revert upstream commit.
  * Fix expired date in main.derived_condition_pushdown test
    - debian/patches/fix_expired_date_in_test.patch: update expired date.

 -- Lena Voytek <email address hidden> Tue, 16 May 2023 16:10:59 -0700

See original description

Related branches

~lvoytek/ubuntu/+source/mysql-8.0:sync-mysql-8.0.33
git-ubuntu bot: Approve
Robie Basak: Approve
Canonical Server Reporter: Pending requested
Diff: 847 lines (+250/-412) (has conflicts)
10 files modified
debian/changelog (+128/-0)
debian/control (+1/-1)
debian/gbp.conf (+1/-1)
debian/mysql-server-8.0.mysql.service (+0/-1)
debian/patches/boost-1.76.0-fix_multiprecision_issue_419-ppc64le.patch (+11/-0)
debian/patches/revert-be8348a7.patch (+55/-0)
debian/rules (+3/-0)
debian/tests/upstream (+5/-0)
debian/upstream/signing-key.asc (+46/-405)
dev/null (+0/-4)

CVE References

Lena Voytek (lvoytek)
Changed in mysql-8.0 (Ubuntu):
importance: Undecided → Wishlist
status: New → Confirmed
Lena Voytek (lvoytek)
description: updated
Revision history for this message
Lena Voytek (lvoytek) wrote :

This bug was fixed in the package mysql-8.0 - 8.0.33-2

---------------
mysql-8.0 (8.0.33-2) unstable; urgency=medium

  * d/t/upstream: Ignore upstream tests due to s390x failure (Closes: 1036803)
    Due to slight variation in the optimization of join statements on s390x, a
    few upstream tests fail as they show a cost slightly higher than expected.
    The tests include main.subquery_sj_all_bka_nobnl and
    main.subquery_sj_mat_bka_nobnl

 -- Lena Voytek <email address hidden> Thu, 25 May 2023 10:20:02 -0700

mysql-8.0 (8.0.33-1) unstable; urgency=medium

  [ Lena Voytek ]
  * Imported upstream version 8.0.33 to fix security issues
    - https://www.oracle.com/security-alerts/cpuapr2023.html#AppendixMSQL
    - CVE-2023-21982 CVE-2023-21980 CVE-2023-21977 CVE-2023-21976
      CVE-2023-21972 CVE-2023-21966 CVE-2023-21962 CVE-2023-21955
      CVE-2023-21953 CVE-2023-21947 CVE-2023-21946 CVE-2023-21945
      CVE-2023-21940 CVE-2023-21935 CVE-2023-21933 CVE-2023-21929
      CVE-2023-21920 CVE-2023-21919 CVE-2023-21911
    Upstream release notes:
    - https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html
    (Closes: #1034719)
  * debian/mysql-testsuite-8.0.install: Added new files
  * d/p/mysql_secure_installation-remove-root-pw-creation.patch: Fix
    mysql_secure_installation by removing root password creation (LP: #1980466)

  [ Marc Deslauriers ]
  * Fix crash on startup on armhf (LP: #2019203)
    - debian/patches/revert-be8348a7.patch: revert upstream commit.
  * Fix expired date in main.derived_condition_pushdown test
    - debian/patches/fix_expired_date_in_test.patch: update expired date.

 -- Lena Voytek <email address hidden> Tue, 16 May 2023 16:10:59 -0700

Changed in mysql-8.0 (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.