Changes 5.6.35:

Security Notes
--------------
Incompatible Change: These changes were made to mysqld_safe:
* Unsafe use of rm and chown in mysqld_safe could result in privilege escalation. chown now can be used only when the target directory is /var/log. An incompatible change is that if the directory for the Unix socket file is missing, it is no longer created; instead, an error occurs. Due to these changes, /bin/bash is required to run mysqld_safe on Solaris. /bin/sh is still used on other Unix/Linux platforms.
* The --ledir option now is accepted only on the command line, not in option files.
* mysqld_safe ignores the current working directory.

Other related changes:
* Initialization scripts that invoke mysqld_safe pass --basedir explicitly.
* Initialization scripts create the error log file only if the base directory is /var/log or /var/lib.
* Unused systemd files for SLES were removed.

* MySQL Server now includes a plugin library that enables administrators to introduce an increasing delay in server response to clients after a certain number of consecutive failed connection attempts. This capability provides a deterrent that slows down brute force attacks that attempt to access MySQL user accounts. For more information, see The Connection-Control Plugin.

* OpenSSL is ending support for version 1.0.1 in December 2016; see https://www.openssl.org/policies/releasestrat.html. Consequently, MySQL Commercial Server builds now use version 1.0.2 rather than version 1.0.1, and the linked OpenSSL library for the MySQL Commercial Server has been updated from version 1.0.1 to version 1.0.2j. For a description of issues fixed in this version, see https://www.openssl.org/news/vulnerabilities.html.

This change does not affect the Oracle-produced MySQL Community build of MySQL Server, which uses the yaSSL library instead.

Functionality Added or Changed
------------------------------
* InnoDB: By default, InnoDB reads uncommitted data when calculating statistics. In the case of an uncommitted transaction that deletes rows from a table, InnoDB excludes records that are delete-marked when calculating row estimates and index statistics, which can lead to non-optimal execution plans for other transactions that are operating on the table concurrently using a transaction isolation level other than READ UNCOMMITTED. To avoid this scenario, a new configuration option, innodb_stats_include_delete_marked, can be enabled to ensure that InnoDB includes delete-marked records when calculating persistent optimizer statistics. (Bug 23333990)
* Unit testing now uses Google Mock 1.8. (Bug 24572381, Bug 82823)

Bugs Fixed

1 files changed, 42 insertions, 2 deletions

diff --git a/databases/mysql56-server/PLIST b/databases/mysql56-server/PLIST
index f39f08dbf0e..6c4fed31f23 100644
--- a/databases/mysql56-server/PLIST
+++ b/databases/mysql56-server/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.27 2016/10/12 16:58:21 adam Exp $
+@comment $NetBSD: PLIST,v 1.28 2016/12/12 19:21:33 adam Exp $
 bin/innochecksum
 bin/my_print_defaults
 bin/myisam_ftdump
@@ -20,6 +20,7 @@ lib/mysql/plugin/adt_null.so
 lib/mysql/plugin/auth.so
 ${PLIST.auth_socket}lib/mysql/plugin/auth_socket.so
 lib/mysql/plugin/auth_test_plugin.so
+lib/mysql/plugin/connection_control.so
 lib/mysql/plugin/daemon_example.ini
 ${PLIST.sphinx}lib/mysql/plugin/ha_sphinx.so
 ${PLIST.memcached}lib/mysql/plugin/innodb_engine.so
@@ -1731,7 +1732,6 @@ share/mysql/test/std_data/bug17532932.frm
 share/mysql/test/std_data/bug19371.MYD
 share/mysql/test/std_data/bug19371.MYI
 share/mysql/test/std_data/bug19371.frm
-share/mysql/test/std_data/bug20683959loaddata.txt
 share/mysql/test/std_data/bug30435_10k_items.txt
 share/mysql/test/std_data/bug30435_5k.txt
 share/mysql/test/std_data/bug33029-slave-relay-bin.000001
@@ -2175,6 +2175,39 @@ share/mysql/test/suite/binlog/t/binlog_write_error.test
 share/mysql/test/suite/binlog/t/binlog_xa_handling.test
 share/mysql/test/suite/binlog/t/disabled.def
 share/mysql/test/suite/binlog/t/show_binlog_events_no_lock.test
+share/mysql/test/suite/connection_control/inc/check_connection_delay.inc
+share/mysql/test/suite/connection_control/inc/cleanup_proxy_accounts.inc
+share/mysql/test/suite/connection_control/inc/have_connection_control_plugin.inc
+share/mysql/test/suite/connection_control/inc/have_test_plugin.inc
+share/mysql/test/suite/connection_control/inc/install_connection_control_plugin.inc
+share/mysql/test/suite/connection_control/inc/set_after_marker.inc
+share/mysql/test/suite/connection_control/inc/set_before_marker.inc
+share/mysql/test/suite/connection_control/inc/setup_proxy_accounts.inc
+share/mysql/test/suite/connection_control/inc/uninstall_connection_control_plugin.inc
+share/mysql/test/suite/connection_control/r/connection_delay_anonymous_user.result
+share/mysql/test/suite/connection_control/r/connection_delay_info_schema_view.result
+share/mysql/test/suite/connection_control/r/connection_delay_invalid_users.result
+share/mysql/test/suite/connection_control/r/connection_delay_min_max.result
+share/mysql/test/suite/connection_control/r/connection_delay_proxy_users.result
+share/mysql/test/suite/connection_control/r/connection_delay_valid_users.result
+share/mysql/test/suite/connection_control/r/status_variables.result
+share/mysql/test/suite/connection_control/r/system_variables.result
+share/mysql/test/suite/connection_control/t/connection_delay_anonymous_user-master.opt
+share/mysql/test/suite/connection_control/t/connection_delay_anonymous_user.test
+share/mysql/test/suite/connection_control/t/connection_delay_info_schema_view-master.opt
+share/mysql/test/suite/connection_control/t/connection_delay_info_schema_view.test
+share/mysql/test/suite/connection_control/t/connection_delay_invalid_users-master.opt
+share/mysql/test/suite/connection_control/t/connection_delay_invalid_users.test
+share/mysql/test/suite/connection_control/t/connection_delay_min_max-master.opt
+share/mysql/test/suite/connection_control/t/connection_delay_min_max.test
+share/mysql/test/suite/connection_control/t/connection_delay_proxy_users-master.opt
+share/mysql/test/suite/connection_control/t/connection_delay_proxy_users.test
+share/mysql/test/suite/connection_control/t/connection_delay_valid_users-master.opt
+share/mysql/test/suite/connection_control/t/connection_delay_valid_users.test
+share/mysql/test/suite/connection_control/t/status_variables-master.opt
+share/mysql/test/suite/connection_control/t/status_variables.test
+share/mysql/test/suite/connection_control/t/system_variables-master.opt
+share/mysql/test/suite/connection_control/t/system_variables.test
 share/mysql/test/suite/engines/README
 share/mysql/test/suite/engines/funcs/r/ai_init_alter_table.result
 share/mysql/test/suite/engines/funcs/r/ai_init_create_table.result
@@ -3474,6 +3507,7 @@ share/mysql/test/suite/innodb/include/innodb_stats_table_flag_analyze.inc
 share/mysql/test/suite/innodb/r/add_foreign_key.result
 share/mysql/test/suite/innodb/r/alter_rename_existing.result
 share/mysql/test/suite/innodb/r/analyze_table.result
+share/mysql/test/suite/innodb/r/autoinc_debug.result
 share/mysql/test/suite/innodb/r/blob-update-debug.result
 share/mysql/test/suite/innodb/r/blob_redo.result
 share/mysql/test/suite/innodb/r/checksum.result
@@ -3641,6 +3675,7 @@ share/mysql/test/suite/innodb/r/innodb_stats_auto_recalc_lots.result
 share/mysql/test/suite/innodb/r/innodb_stats_auto_recalc_on_nonexistent.result
 share/mysql/test/suite/innodb/r/innodb_stats_create_on_corrupted.result
 share/mysql/test/suite/innodb/r/innodb_stats_create_table.result
+share/mysql/test/suite/innodb/r/innodb_stats_del_mark.result
 share/mysql/test/suite/innodb/r/innodb_stats_drop_locked.result
 share/mysql/test/suite/innodb/r/innodb_stats_external_pages.result
 share/mysql/test/suite/innodb/r/innodb_stats_fetch.result
@@ -3668,6 +3703,7 @@ share/mysql/test/suite/innodb/r/xa_recovery.result
 share/mysql/test/suite/innodb/t/add_foreign_key.test
 share/mysql/test/suite/innodb/t/alter_rename_existing.test
 share/mysql/test/suite/innodb/t/analyze_table.test
+share/mysql/test/suite/innodb/t/autoinc_debug.test
 share/mysql/test/suite/innodb/t/blob-update-debug.test
 share/mysql/test/suite/innodb/t/blob_redo-master.opt
 share/mysql/test/suite/innodb/t/blob_redo.test
@@ -3871,6 +3907,8 @@ share/mysql/test/suite/innodb/t/innodb_stats_auto_recalc_lots.test
 share/mysql/test/suite/innodb/t/innodb_stats_auto_recalc_on_nonexistent.test
 share/mysql/test/suite/innodb/t/innodb_stats_create_on_corrupted.test
 share/mysql/test/suite/innodb/t/innodb_stats_create_table.test
+share/mysql/test/suite/innodb/t/innodb_stats_del_mark-master.opt
+share/mysql/test/suite/innodb/t/innodb_stats_del_mark.test
 share/mysql/test/suite/innodb/t/innodb_stats_drop_locked.test
 share/mysql/test/suite/innodb/t/innodb_stats_external_pages.test
 share/mysql/test/suite/innodb/t/innodb_stats_fetch.test
@@ -7817,6 +7855,7 @@ share/mysql/test/suite/sys_vars/r/innodb_saved_page_number_debug_basic.result
 share/mysql/test/suite/sys_vars/r/innodb_sort_buffer_size_basic.result
 share/mysql/test/suite/sys_vars/r/innodb_spin_wait_delay_basic.result
 share/mysql/test/suite/sys_vars/r/innodb_stats_auto_recalc_basic.result
+share/mysql/test/suite/sys_vars/r/innodb_stats_include_delete_marked_basic.result
 share/mysql/test/suite/sys_vars/r/innodb_stats_method_basic.result
 share/mysql/test/suite/sys_vars/r/innodb_stats_on_metadata_basic.result
 share/mysql/test/suite/sys_vars/r/innodb_stats_persistent_basic.result
@@ -8432,6 +8471,7 @@ share/mysql/test/suite/sys_vars/t/innodb_saved_page_number_debug_basic.test
 share/mysql/test/suite/sys_vars/t/innodb_sort_buffer_size_basic.test
 share/mysql/test/suite/sys_vars/t/innodb_spin_wait_delay_basic.test
 share/mysql/test/suite/sys_vars/t/innodb_stats_auto_recalc_basic.test
+share/mysql/test/suite/sys_vars/t/innodb_stats_include_delete_marked_basic.test
 share/mysql/test/suite/sys_vars/t/innodb_stats_method_basic.test
 share/mysql/test/suite/sys_vars/t/innodb_stats_on_metadata_basic.test
 share/mysql/test/suite/sys_vars/t/innodb_stats_persistent_basic.test