| 2016-07-05 02:52:58 |
davidreedernst |
bug |
|
|
added bug |
| 2016-07-06 13:36:38 |
Robie Basak |
mysql-5.7 (Ubuntu): importance |
Undecided |
High |
|
| 2016-07-06 13:36:56 |
Robie Basak |
mysql-5.7 (Ubuntu): assignee |
|
Lars Tangvald (lars-tangvald) |
|
| 2016-07-06 13:47:54 |
Lars Tangvald |
bug watch added |
|
http://bugs.mysql.com/bug.php?id=81958 |
|
| 2016-07-14 11:09:07 |
Robie Basak |
nominated for series |
|
Ubuntu Xenial |
|
| 2016-07-14 11:09:07 |
Robie Basak |
bug task added |
|
mysql-5.7 (Ubuntu Xenial) |
|
| 2016-07-14 11:09:16 |
Robie Basak |
mysql-5.7 (Ubuntu Xenial): importance |
Undecided |
High |
|
| 2016-08-12 08:00:19 |
Lars Tangvald |
mysql-5.7 (Ubuntu): status |
New |
In Progress |
|
| 2016-08-27 06:55:44 |
Gasol Wu |
bug |
|
|
added subscriber Gasol Wu |
| 2016-08-27 08:49:16 |
Gasol Wu |
attachment added |
|
mysql-5.7_5.7.13-0ubuntu5.debdiff https://bugs.launchpad.net/ubuntu/xenial/+source/mysql-5.7/+bug/1598992/+attachment/4728700/+files/mysql-5.7_5.7.13-0ubuntu5.debdiff |
|
| 2016-08-27 12:31:42 |
Ubuntu Foundations Team Bug Bot |
tags |
amd64 apport-bug sarah |
amd64 apport-bug patch sarah |
|
| 2016-08-27 12:31:52 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Sponsors Team |
| 2016-09-18 09:58:38 |
Lars Tangvald |
mysql-5.7 (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2016-09-18 10:01:21 |
Lars Tangvald |
mysql-5.7 (Ubuntu): status |
Fix Committed |
In Progress |
|
| 2016-09-20 11:39:58 |
Lars Tangvald |
mysql-5.7 (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2016-09-28 09:15:41 |
Launchpad Janitor |
mysql-5.7 (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2016-10-03 08:55:03 |
Lars Tangvald |
tags |
amd64 apport-bug patch sarah |
amd64 apport-bug patch sarah xenial-candidate |
|
| 2016-12-01 11:39:30 |
Lars Tangvald |
summary |
MySQL Server installation freezes if root password contains a single quote (apostrophe) |
MySQL Server installation freezes if root password contains special characters such as apostrophe |
|
| 2016-12-01 11:39:46 |
Lars Tangvald |
summary |
MySQL Server installation freezes if root password contains special characters such as apostrophe |
MySQL Server installation fails if root password contains special characters such as apostrophe |
|
| 2016-12-01 11:39:54 |
Lars Tangvald |
description |
Running linuxmint 18, had trouble installating mysql-server. After a fair amount of frustration, I dug around, found a temp file that had a command in it to change my root password, my password was there (in plain text), and had a clear problem with the apostrophe in the password. It looked something like this:
SET PASSWORD FOR 'root'@'localhost' = PASSWORD('YouWeren'tExpectingThis');
I didn't save the file, did successfully install MySQL with a password without the single quote, and I'm not going to undo that all just to give a better bug report. I'm sure your programmers won't have any trouble tracking this down.
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: mysql-server-5.7 5.7.12-0ubuntu1.1
ProcVersionSignature: Ubuntu 4.4.0-28.47-generic 4.4.13
Uname: Linux 4.4.0-28-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
CurrentDesktop: X-Cinnamon
Date: Mon Jul 4 22:36:34 2016
InstallationDate: Installed on 2016-07-02 (2 days ago)
InstallationMedia: Linux Mint 18 "Sarah" - Release amd64 20160628
Logs.var.log.daemon.log:
MySQLConf.etc.mysql.conf.d.mysql.cnf: [mysql]
MySQLConf.etc.mysql.conf.d.mysqldump.cnf:
[mysqldump]
quick
quote-names
max_allowed_packet = 16M
MySQLConf.etc.mysql.mysql.conf.d.mysqld_safe_syslog.cnf:
[mysqld_safe]
syslog
MySQLVarLibDirListing: False
ProcEnviron:
TERM=xterm-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: mysql-5.7
UpgradeStatus: No upgrade log present (probably fresh install) |
The postinst script for mysql-server-5.7 can take a root password for the server as input. It does not properly escape this password before passing it to the server in an SQL script.
[Impact]
If a user enters a root password containing such a password, MySQL will throw a syntax error when d/postinst tries to set it, causing postinst failure.
One would expect the password to support special characters, and e.g. pwgen -y will generate password containing such.
We fix this by passing the password through coreutil's printf %q, which escapes all special characters.
[Test case]
Install the mysql-server-5.7 package, and enter "pass'word" when prompted for the root password. This should work
[Regression Potential]
This change has been in Yakkety for some time (5.7.15-0ubuntu2).
== printf %q changes behavior ==
Unlikely, since it's part of coreutils, but it might cause similar syntax errors as what is seen now, or result in a root password that is different from what the user expect (fixable for an admin, but would be confusing)
== printf %q escapes characters that should not be escaped ==
Some characters, such as $, do not need to be escaped for MySQL, but are escaped by printf %q. For those tested, MySQL supports both (passing \$ is equivalent to passing $), but if this support is incomplete it could result in syntax error and postinst failure.
[Original description]
Running linuxmint 18, had trouble installating mysql-server. After a fair amount of frustration, I dug around, found a temp file that had a command in it to change my root password, my password was there (in plain text), and had a clear problem with the apostrophe in the password. It looked something like this:
SET PASSWORD FOR 'root'@'localhost' = PASSWORD('YouWeren'tExpectingThis');
I didn't save the file, did successfully install MySQL with a password without the single quote, and I'm not going to undo that all just to give a better bug report. I'm sure your programmers won't have any trouble tracking this down.
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: mysql-server-5.7 5.7.12-0ubuntu1.1
ProcVersionSignature: Ubuntu 4.4.0-28.47-generic 4.4.13
Uname: Linux 4.4.0-28-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
CurrentDesktop: X-Cinnamon
Date: Mon Jul 4 22:36:34 2016
InstallationDate: Installed on 2016-07-02 (2 days ago)
InstallationMedia: Linux Mint 18 "Sarah" - Release amd64 20160628
Logs.var.log.daemon.log:
MySQLConf.etc.mysql.conf.d.mysql.cnf: [mysql]
MySQLConf.etc.mysql.conf.d.mysqldump.cnf:
[mysqldump]
quick
quote-names
max_allowed_packet = 16M
MySQLConf.etc.mysql.mysql.conf.d.mysqld_safe_syslog.cnf:
[mysqld_safe]
syslog
MySQLVarLibDirListing: False
ProcEnviron:
TERM=xterm-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: mysql-5.7
UpgradeStatus: No upgrade log present (probably fresh install) |
|
| 2016-12-16 09:28:24 |
Lars Tangvald |
mysql-5.7 (Ubuntu Xenial): status |
New |
Fix Committed |
|
| 2016-12-16 09:28:24 |
Lars Tangvald |
mysql-5.7 (Ubuntu Xenial): assignee |
|
Lars Tangvald (lars-tangvald) |
|
| 2016-12-16 11:42:34 |
Lars Tangvald |
mysql-5.7 (Ubuntu Xenial): status |
Fix Committed |
In Progress |
|
| 2017-01-06 11:43:19 |
Robie Basak |
mysql-5.7 (Ubuntu Xenial): milestone |
|
xenial-updates |
|
| 2017-02-06 13:06:16 |
Andy Whitcroft |
mysql-5.7 (Ubuntu Xenial): status |
In Progress |
Fix Committed |
|
| 2017-02-06 13:06:18 |
Andy Whitcroft |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2017-02-06 13:06:26 |
Andy Whitcroft |
bug |
|
|
added subscriber SRU Verification |
| 2017-02-06 13:06:30 |
Andy Whitcroft |
tags |
amd64 apport-bug patch sarah xenial-candidate |
amd64 apport-bug patch sarah verification-needed xenial-candidate |
|
| 2017-03-14 08:57:22 |
Lars Tangvald |
tags |
amd64 apport-bug patch sarah verification-needed xenial-candidate |
amd64 apport-bug patch sarah verification-done xenial-candidate |
|
| 2017-03-29 08:48:29 |
Robie Basak |
removed subscriber Ubuntu Sponsors Team |
|
|
|
| 2017-04-05 17:05:01 |
Launchpad Janitor |
mysql-5.7 (Ubuntu Xenial): status |
Fix Committed |
Fix Released |
|
| 2017-04-05 17:05:01 |
Launchpad Janitor |
bug watch added |
|
http://bugs.mysql.com/bug.php?id=83340 |
|
| 2017-04-05 17:05:28 |
Brian Murray |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
