Changelog for perl-DBD-mysql-4.043-62.4.x86_64.rpm :
Tue Nov 14 13:00:00 2017 pmonrealgonzalezAATTsuse.com
- Fixed build with libmariadb [bsc#1067882]
- Added patch:

* perl-DBD-mysql-4.043-Fix-build-failures-for-MariaDB.patch

Mon Jul 17 14:00:00 2017 pmonrealgonzalezAATTsuse.com
- Add patch to fix CVE-2017-10788 bsc#1047095

* Denial of service or possibly RCE through use-after-free

* perl-DBD-mysql-4.043-CVE-2017-10788.patch

Fri Jun 30 14:00:00 2017 cooloAATTsuse.com
- updated to 4.043
see /usr/share/doc/packages/perl-DBD-mysql/Changes
2017-06-29 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.043)
YOUR ATTENTION PLEASE, THIS IS A REVERT TO 4.041
This version is the same as 4.041 with all its bugs and
limitations. In version 4.042 there were some changes to Unicode handling
that turned out to be causing issues with existing implementations.
While it is possible to argue that the old behaviour was wrong and buggy,
lots of applications and scripts were depending on this behaviour so it
is NOT a good idea to change this.
There were lots of commits since 4.041, we\'ll add those back bit by bit
in a future release, excluding the ones which cause problems.
2017-??-?? Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.042_01)

* Use Devel::CheckLib 1.09 or newer, fixes
https://github.com/perl5-dbi/DBD-mysql/issues/109

* Improve CI testing on AppVeyor: caching, path to cpan, configure deps (pali)

* Specify bigint as test dependency.

Thu Mar 9 13:00:00 2017 cooloAATTsuse.com
- updated to 4.042
see /usr/share/doc/packages/perl-DBD-mysql/Changes
2017-03-08 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.042)

* Full release to include development releases 4.041_2 and 4.041_1.
2017-02-28 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.041_2)

* Statement handle now also has mysql_sock attribute, just as database handle.
(by Pali)

* Fix type conversions for magic types. Issue reported by Dmitriy Yatsenko and
Giovanni Bechis, fix by Pali.
https://lists.amavis.org/pipermail/amavis-users/2016-December/004674.html
https://github.com/perl5-dbi/DBD-mysql/issues/78

* Fix UTF8-encoding of table names, field names, warnings and error messages.
Reported by Tanabe Yoshinori, fix by Pali.
https://rt.cpan.org/Public/Bug/Display.html?id=120141

* Fix mysql_auto_reconnect when using mysql_server_prepare (pali). Reported by
Vladimir Marek.
https://github.com/perl5-dbi/DBD-mysql/pull/95

* Improve regex for removing database from dsn (pali)
https://rt.cpan.org/Public/Bug/Display.html?id=118837

* Locate MySQL libs using Devel::CheckLib (pali)

* Support async on Windows (pali)

* Fix test suite on range of older and newer MySQL and MariaDB versions
(https://github.com/perl5-dbi/DBD-mysql/pull/87)

* Fix compilation on MySQL 4.1 (pali)

* Do not leak dangling pointer to mysql result (pali)

* Fix logic when assigning to variable bind_comment_placeholders (pali)

* mysql_fd() still returned file descriptor after closing connection.
Reported by Larry Leszczynski, fixed by Pali Rohár.
(https://rt.cpan.org/Public/Bug/Display.html?id=110983)

* Fix parsing configure libs from mysql_config --libs output in Makefile.PL
Libraries in mysql_config --libs output can be specified by library name
with the -l prefix or by absolute path to library name without any prefix.
Parameters must start with a hyphen, so treat all options without leading
hyphen in mysql_config --libs output as libraries with full path.
Partially fixes bug https://rt.cpan.org/Public/Bug/Display.html?id=100898
Fix by Pali Rohár.

* Fix support for magic scalars (pali)
(https://github.com/perl5-dbi/DBD-mysql/pull/76)
2016-12-12 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.041_1)

* Unicode fixes: when using mysql_enable_utf8 or mysql_enable_utf8mb4,
previous versions of DBD::mysql did not properly encode input statements
to UTF-8 and retrieved columns were always UTF-8 decoded regardless of the
column charset.
Fix by Pali Rohár.
Reported and feedback on fix by Marc Lehmann
(https://rt.cpan.org/Public/Bug/Display.html?id=87428)
Also, the UTF-8 flag was not set for decoded data:
(https://rt.cpan.org/Public/Bug/Display.html?id=53130)

* Return INTs with ZEROFILL as strings. Reported by Knarf, fix by Pali Rohár.
(https://rt.cpan.org/Public/Bug/Display.html?id=118977)

Tue Nov 29 13:00:00 2016 cooloAATTsuse.com
- updated to 4.041 bsc#1012546 CVE-2016-1251 bsc#1010457 CVE-2016-1249
bsc#1002626 CVE-2016-1246
see /usr/share/doc/packages/perl-DBD-mysql/Changes
2016-11-28 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.041)

* Fix use-after-free for repeated fetchrow_arrayref calls when
mysql_server_prepare=1
Function dbd_st_fetch() via Renew() can reallocate output buffer for
mysql_stmt_fetch() call. But it does not update pointer to that buffer in
imp_sth->stmt structure initialized by mysql_stmt_bind_result() function.
That leads to use-after-free in any mysql function which access
imp_sth->stmt structure (e.g. mysql_stmt_fetch()).
This patch fix this problem and properly updates pointer in imp_sth->stmt
structure after Renew() call.
This is a medium level security issue to which the Debian security team
assigned identifier CVE-2016-1251. Discovered and fixed by Pali Rohár.

* auto_reconnect now also matches CR_SERVER_LOST, previously this only
matched CR_SERVER_GONE.
Fixes http://bugs.mysql.com/bug.php?id=27613
Fix suggested by Wouter de Jong.

* Fix compilation fixes (Pali Rohár).

Sun Nov 20 13:00:00 2016 cooloAATTsuse.com
- updated to 4.040
see /usr/share/doc/packages/perl-DBD-mysql/Changes
2016-11-19 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.040)

* Since 4.038 we had problems compiling on big-endian architectures, such
as MIPS, s390 and Sparc. Thanks to Salvatore Bonaccorso AATT Debian project
(https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=844538)
and Vladimir Marek (https://rt.cpan.org/Public/Bug/Display.html?id=118835)
for reporting the issues. Fix by Pali Rohár.
Fix integer types when server side prepare statements are enabled
Fixed problems:

* SQL_BIGINT was incorrectly handled as 32bit MYSQL_TYPE_LONG type instead
64bit MYSQL_TYPE_LONGLONG which led to integer overflow/underflow

* 32bit MYSQL_TYPE_LONG was used for perl\'s IV storage when IV was 64bit
and 64bit MYSQL_TYPE_LONGLONG was used when IV was 32bit

* All unsigned types were handled as signed, so all high positive values
were treated as negative

* Numeric conversions in perl which led to overflow/underflow was ignored
even when mysql strict mode was enabled

* Test t/41int_min_max.t was running only for normal non-prepared statements

* Test t/40server_prepare.t used incorrect SQL type for big (64bit) integers

Thu Nov 17 13:00:00 2016 cooloAATTsuse.com
- updated to 4.039
see /usr/share/doc/packages/perl-DBD-mysql/Changes
2016-11-15 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.039)

* Fix for security issue Out-of-bounds read by DBD::mysql CVE-2016-1249 (pali)
2016-10-30 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.038_01)

* Fix compilation of embedded server (pali)
(https://github.com/perl5-dbi/DBD-mysql/pull/68)

* Fix compilation against libmariadbclient. First version by
H.Merijn Brand, improved by Bernt Johnsen AATT Oracle.

* For efficiency use newSVpvn() instead newSVpv() where possible (pali)

* Correctly coerce fetched scalar values when mysql_server_prepare is
not used (pali)

* Add support for fetching columns of BIT type with
mysql_server_prepare = 1 (pali)
Fixes https://rt.cpan.org/Public/Bug/Display.html?id=88006

* Use correct format in printf instead of casting variable types (pali)

* Include errno.h for MYSQL_ASYNC because it uses errno variable (pali)

* Travis: also test on perl 5.22 and 5.24.

Fri Oct 21 14:00:00 2016 cooloAATTsuse.com
- updated to 4.038
see /usr/share/doc/packages/perl-DBD-mysql/Changes
2016-10-19 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.038)

* Version 4.037_1 had fixes for MySQL 8.0 provided
Bernt Johnsen AATT Oracle that were not in the Changelogs
(https://github.com/perl5-dbi/DBD-mysql/pull/56)

* Fixes for compiling against newer libmysqlclient on Windows (kmx)

* Fix unit test for 40server_prepare_crash on Windows (pali)

* Perl\'s IV in scalar can store 64bit integer when perl was compiled
with 64 bit support (default on 64bit linux with gcc). Use this
feature and stores MYSQL_TYPE_LONGLONG as integers instead of strings
when possible. (pali, https://github.com/perl5-dbi/DBD-mysql/pull/57)
2016-10-14 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.037_01)

* Newest versions of libmysqlclient and the MariaDB C connector no longer
export the __WIN__ macro. If this macro is not present we would not
compile in the poll.h-based async-support. Changed to use the _WIN32
macro instead. Thanks to Sergei Golubchik for suggesting the fix.

* Fix from Pali Rohár to not use unsafe sprintf with variable lengt,
changes to bind logic, and added test 40server_prepare_crash.

Tue Oct 4 14:00:00 2016 cooloAATTsuse.com
- updated to 4.037
see /usr/share/doc/packages/perl-DBD-mysql/Changes
2016-10-03 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.037)

* Security release to patch possible buffer overflow in prepared
statements. Reported and fixed by Pali Rohár. This vulnerability
is present in all releases at least back to versions 3.0 of the
driver, which were released in 2005.
The CVE identifier for this vulnerability is CVE-2016-1246.

Wed Aug 24 14:00:00 2016 cooloAATTsuse.com
- updated to 4.036
see /usr/share/doc/packages/perl-DBD-mysql/Changes
2016-08-23 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.036)
Stable version, to include all changes since 4.035.
2016-08-19 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.035_03)

* By mistake, when DBD::mysql was compiled against libmariadb, it
did not compile in SSL support.
Reported by Jitka Plesnikova AATT Red Hat
(https://rt.cpan.org/Public/Bug/Display.html?id=116959)
(https://bugzilla.redhat.com/show_bug.cgi?id=1366773)

* If the database test server was not on localhost and the test database was
not yet created, we would not correctly create the test database.
Reported by Vladimir Marek.
(https://rt.cpan.org/Ticket/Display.html?id=112072)
2016-08-11 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.035_02)

* Test 56connattr.t failed when run when performance schema is enabled, but
tests were run as a user with limited permissions.
Reported by Jérôme Étévé.
(https://rt.cpan.org/Public/Bug/Display.html?id=115980)

* In 4.033_03 we added a patch from Petr Písař AATT Red Hat for a problem on
64-bit big-endian systems. The patch was applied but the unit test was not,
also, there was no entry in the change log.
Unit test provided by Vladimir Marek.
t/40server_prepare.t test failed on s390x platform. Server-prepared
values of types int, smallint, and tinyint are passed to application
as 32-bit integer. The same buffer was interpreted as long integer
by DBD::MySQL. This caused misaligned read/write and bogus
interpretation of the values.
(https://rt.cpan.org/Public/Bug/Display.html?id=57266)

* Remove dropdb, createdb, reload and shutdown admin functions from perldoc.
These are deprecated by the C API.
Use \'CREATE DATABASE..\', \'DROP DATABASE...\' and other SQL commands instead.

* Test rt75353-innodb-lock-timeout.t fails on MySQL Server 5.1 and earlier
because innodb_lock_wait_timeout is not modifyable per session.

* Test rt25389-bin-case.t does not work on MySQL Server < 5.1, reported by
GAAS.
2016-08-01 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.035_01)

* Apparently, on t/31insertid.t, there is one test that fails when compiled
against libmysqlclient 5.7 or up; issuing a SELECT statement on the same
database handle that previously executed an INSERT clears
$dbh->{mysql_insertid}, while previously this was retained.
(https://rt.cpan.org/Ticket/Display.html?id=108000)

* Removed appveyor.yml and mysql.mtest from CPAN releases.

* Converted README.pod to README.md because of installation failures on
FreeBSD, reported by Don Randolph.
(https://rt.cpan.org/Public/Bug/Display.html?id=114177)

Sat Jul 30 14:00:00 2016 cooloAATTsuse.com
- updated to 4.035
see /usr/share/doc/packages/perl-DBD-mysql/Changes
2016-07-09 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.035)

* Add DBI back to configure_requires, fix by miyagawa.

Thu Jul 7 14:00:00 2016 cooloAATTsuse.com
- updated to 4.034
see /usr/share/doc/packages/perl-DBD-mysql/Changes

Thu Oct 29 13:00:00 2015 cooloAATTsuse.com
- updated to 4.033
see /usr/share/doc/packages/perl-DBD-mysql/ChangeLog
2015-10-26 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.033)

* Full-release to include 03.
2015-10-25 Patrick Galbraith, Michiel Beijen, DBI/DBD community (4.032_03)

* Use mysql_get_option to read net_buffer_length and mysql_get_parameter
where available, needed for MySQL 5.7.9. Patch from berntm AATT Oracle.
https://github.com/perl5-dbi/DBD-mysql/pull/42

* Fix mysql_conn_attrs test when run against MySQL 5.1 server.

* Fix for memory leak to $sth->{ParamValues} , RT83051
https://rt.cpan.org/Public/Bug/Display.html?id=83051

* Fixes for running test suite on MySQL 5.7.

* Fix running test suite with InnoDB disabled, reported by bor.

Thu Sep 3 14:00:00 2015 bwiedemannAATTsuse.com
- drop upstreamed bnc658792_pod_name_install.diff

Thu Sep 3 14:00:00 2015 cooloAATTsuse.com
- updated to 4.032
see /usr/share/doc/packages/perl-DBD-mysql/ChangeLog

Sat Apr 28 14:00:00 2012 pascal.bleserAATTopensuse.org
- update to 4.021:

* fix to enable PERL_NO_GET_CONTEXT to spee up DBD on thread Perls

* fix to is_prefix not being exported by mysql

* eliminate DBIS usage

* enhanced/fixed server side prepared statement checks

* fix missprint in doc of DBD::mysql of mysql_bind_type_guessing

* misprint in lib/DBD/mysql.pm

Mon Aug 29 14:00:00 2011 vcizekAATTsuse.com
- update to 4.020

* Numerous (!! Thank you!!) fixes for prepared statements
- Chop blanks fixed
- UTF8 improvements
- fixed memory allocation for BLOBs
- auto-reconnect

* Fix in leak test, which failed sometime due to first assignment $prev_size over
paging (Masahiro Chiba)

* Catalog test allows use of schemas other than \'test\' (Masahiro Chiba)

* Documentation fix for auto_reconnect (Karen Etheridge org>)

* Win32 and general installation fixes (Alexandr Ciornii, http://chorny.net)

Mon May 9 14:00:00 2011 pascal.bleserAATTopensuse.org
- update to 4.019:

* asynchronous support

* fix to change sv_undef to PL_sv_undef from 4.018

Fri Jan 7 13:00:00 2011 vcizekAATTnovell.com
- update to 4.018
- added bnc658792_pod_name_install.diff to fix BNC#658792
upstreamed as https://rt.cpan.org/Ticket/Display.html?id=64013

* Added client and server info patch from Robert M. Jansen

* Added documentation and tests for new features

* More code cleanup

Fri Dec 17 13:00:00 2010 jwAATTnovell.com
- added bnc658792_pod_name_install.diff to fix BNC#658792
upstreamed as https://rt.cpan.org/Ticket/Display.html?id=64013
- updated to 4.018

* Added client and server info patch from Robert M. Jansen

* Added documentation and tests for new features

* More code cleanup

Wed Dec 1 13:00:00 2010 cooloAATTnovell.com
- switch to perl_requires macro

Mon Aug 23 14:00:00 2010 anickaAATTsuse.cz
- update to 4.017

* BUG #60085, Andreas Koenig\'s patch for DBI changes

* Updated documents

Fri Jul 16 14:00:00 2010 chrisAATTcomputersalat.de
- update to 4.016

* Disabled mysql_bind_type_guessing due to one performance issue
querying on a indexed character column unquoted will mean the index
is not used

* Fixed int types that should be bools
- 2010-07-09 Patrick Galbraith (4.015)

* BUG #56664 fixed t/40blobs.t skip_all logic (W. Phillip Moore)

* BUG #57253 Fixed iteration past end of string (crash). (Chris Butler)

* Added a new parameter for old behavior- mysql_bind_comment_placeholders which
will make it possible to have placeholders bound for those who really
want that behavior.

* Fixed bind_type_guessing - always on now
- recreated by cpanspec 1.78

Fri Apr 16 14:00:00 2010 chrisAATTcomputersalat.de
- update to 4.014

* BUG 30033 Fixed handling of comments to allow comments that
contain characters that might otherwise cause placeholder
detection to not work properly

* BUG 53844, Fix for memory leak in stats. (Gregory Burmistrov)

* BUG 49719, Fix for handling of NULLs in prepared statements
(Gert Pache)

* BUG 55627, Fix for testing failure due to strict mode (Yves)

* BUG 51784, Fix for mysqladmin on Windows in Makefile
(Zeeshan Muhammad)

* BUG 41630, Typo in Makefile

* Had to define true and false in dbdimp.h. Didn\'t work out of
the box on Linux
- cleanup spec

* recreated with cpanspec

* disabled old Provides/Obsoletes
mysqperl perl-Msql-Mysql-modules

* added eg to doc
- rpmlint

* file permission
o chmod a-x on several files

Fri Jan 15 13:00:00 2010 anickaAATTsuse.cz
- update to 4.013

* #49484: PATCH add support for MYSQL_INIT_COMMAND to
DBD::mysql - Thanks Peter John Edwards ?

* #48242: \'mysql_bind_type_guessing\' doesn\'t work correctly
with minus sign - Thanks Serguei Trouchelle!

* #45616: t/40blobs.t cannot pass without database access -
ServerError() not declared

Sun Jan 10 13:00:00 2010 jengelhAATTmedozas.de
- enable parallel build

Mon Aug 3 14:00:00 2009 anickaAATTsuse.cz
- update to 4.012

* Patch to bind_type_guessing from Craigslist,
Thanks to Chris! Happiness is no quoted numbers.
Fixed ChopBlanks to work with bind_type_guessing

* Patch for win32 strawberry build
Thanks to Curtis Jewell! Windows needs love

* Patch for auto-reconnect to set active flag
Thanks to Doug Fischer!

* Fixed bug 32464 http://bugs.mysql.com/bug.php?id=32464.
See https://rt.cpan.org/Ticket/Display.html?id=46308
Add connection flag mysql_no_autocommit_cmd which users of
MySQL Proxy can use to prevent \'set autocommit=#\' from being
issued by the driver. \'perldoc DBD::mysql\' to see how to use
this new flag

* Added bind-type-guessing options to Makefile.PL so the entire
test suite can be run with bind_type_guessing set.

Tue Apr 14 14:00:00 2009 anickaAATTsuse.cz
- update to 4.011

* Renamed unsafe_bind_type_guessing, fixed some of the logic.

* Fix issue of binding sever side integer parameters (server-side
prepare statements) resulting in corrupt data

* Updated documentation, cruft cleanup (as always)