Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 179398 - dev-db/mysql-5.0.38 ~ 5.0.41 AND 5.0.42 - Problem comparing DATEs with DATETIMEs
Summary: dev-db/mysql-5.0.38 ~ 5.0.41 AND 5.0.42 - Problem comparing DATEs with DATETIMEs
Status: RESOLVED WORKSFORME
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: All Linux
: High major (vote)
Assignee: Gentoo Linux MySQL bugs team
URL: http://bugs.mysql.com/bug.php?id=28869
Whiteboard:
Keywords: REGRESSION
Depends on:
Blocks: 177913
  Show dependency tree
 
Reported: 2007-05-22 09:14 UTC by Christopher Taylor
Modified: 2008-01-16 04:06 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Christopher Taylor 2007-05-22 09:14:18 UTC
Portage has MySQL 5.0.40 unmasked and available for building, but there was a bug marked serious by the MySQL team in that version (http://bugs.mysql.com/bug.php?id=27590).  I would suggest masking that version until 5.0.42 is available.

Reproducible: Always

Steps to Reproduce:
1. emerge mysql
2. use any app that compares DATE and DATETIME fields
3. watch it work incorrectly
Comment 1 Jakub Moc (RETIRED) gentoo-dev 2007-05-22 09:22:22 UTC
We are not going to mask this; it fixes a DoS vulnerability. Have you tested the upstream patch?
Comment 2 Christopher Taylor 2007-05-22 09:31:32 UTC
Sorry if I'm a little slow on this, but will the upstream patch from MySQL be applied automatically when I emerge, or is it something I need to do by hand?  As of last night 5.0.40 was still having the same issue (I upgraded last night), but the bug was fixed by the MySQL team on May 2nd.

Comment 3 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-05-22 09:35:35 UTC
Please combine the following two patches and test to see the problem is resolved for you.
http://lists.mysql.com/commits/25534?f=plain
http://lists.mysql.com/commits/25633?f=plain

Comment 4 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-05-22 09:36:09 UTC
You need to apply the patches manually (or modify the ebuild to apply them for you).
Comment 5 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-06-07 02:16:08 UTC
5.0.42 will be in the tree now and should contain these fixes.
Comment 6 Bruno 2007-06-07 06:43:17 UTC
Note that 5.0.42 also has issues regarding date comparisons, see:
  http://bugs.mysql.com/bug.php?id=28869
Comment 7 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-06-13 22:25:05 UTC
Reopen for pending uptsream.
Comment 8 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-07-11 08:52:12 UTC
Bruno, please retest with 5.0.44 that is entering the tree shortly.
Comment 9 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2008-01-16 04:06:43 UTC
no response from user, I assume 5.0.44 fixed it, 5.0.54 is in the tree too now.