Changeset: 2842c3025211 for MonetDB URL: https://dev.monetdb.org/hg/MonetDB/rev/2842c3025211 Modified Files: MonetDB.spec clients/ChangeLog-Archive clients/ChangeLog.Mar2025 debian/changelog Branch: Mar2025 Log Message:
Moved contents of ChangeLog.Mar2025 to MonetDB.spec, debian/changelog and ChangeLog-Archive. diffs (145 lines): diff --git a/MonetDB.spec b/MonetDB.spec --- a/MonetDB.spec +++ b/MonetDB.spec @@ -95,7 +95,7 @@ Group: Applications/Databases License: MPL-2.0 URL: https://www.monetdb.org/ BugURL: https://github.com/MonetDB/MonetDB/issues -Source: https://www.monetdb.org/downloads/sources/Mar2025-SP2/MonetDB-%{version}.tar.bz2 +Source: https://www.monetdb.org/downloads/sources/Mar2025-SP3/MonetDB-%{version}.tar.bz2 # The Fedora packaging document says we need systemd-rpm-macros for # the _unitdir and _tmpfilesdir macros to exist; however on RHEL 7 @@ -1057,6 +1057,48 @@ rm "${RPM_BUILD_ROOT}"%{_unitdir}/monetd %endif %changelog +* Tue Nov 04 2025 Sjoerd Mullender <[email protected]> - 11.53.15-20251104 +- Rebuilt. +- GH#7662: Privilege Issue: MonetDB Mar2025-SP1 does not check the + permission of 'DROP ROLE' and 'DROP USER' statements +- GH#7663: Privilege Issue: the `ALTER USER ... DEFAULT ROLE` statement + misses permission checks, which can cause privilege escalation to get + other users' privileges +- GH#7664: Privilege Issue: the `SET SESSION AUTHORIZATION` statement will + enable any user to alter other users' MAX_WORKERS +- GH#7665: MonetDB dev-builds crashes at `sql_trans_drop_trigger()` +- GH#7666: MonetDB Mar2025-SP1 unexpectly shutdown with crafted `GLOBAL + TEMPORARY TABLE` and `ALTER TABLE` statements +- GH#7668: MonetDB Mar2025-SP1 crashes at `key_dup()` +- GH#7669: MonetDB Mar2025-SP1 crashes at `AUTHdecypherValue()` +- GH#7670: MonetDB Mar2025-SP1 crashes at `exp_subtype()` +- GH#7672: MonetDB Mar2025-SP1 crashes at `find_name()` +- GH#7673: MonetDB Mar2025-SP1 crashes at `rel_value_exp2()` +- GH#7674: MonetDB Mar2025-SP1 crashes at `rel_schemas()` +- GH#7689: Empty SQL result (no rows, no columns) +- GH#7699: The OPTIMIZER string value in CREATE USER statement is not + checked on validity. +- GH#7702: Invalid handling of WHERE conditions +- GH#7706: Role (bob) missing +- GH#7710: Monetdb crash when using char datatype +- GH#7730: Incorrect arithmetic in generate_series with month-based + intervals +- GH#7732: Missing column name in select expands to all columns in table +- GH#7733: mserver5 assertion failure when started with -d2 --in-memory +- GH#7734: 'epoch' function doesn't handle fractions with leading zeros + correctly +- GH#7735: crash in Monetdb +- GH#7736: crash in MonetDB +- GH#7737: SQL Query Optimizer / Performance Regression with Merge Tables + in MonetDB 11.53 +- GH#7742: crash in MonetDB + +* Thu Sep 11 2025 Sjoerd Mullender <[email protected]> - 11.53.15-20251104 +- clients: Changed the --describe (-D) option of msqldump to really mean (as it + says in the manual) do a dump without the data. Before, the output + looked like a dump, but could not necessarily be fed back into an + mserver5, i.e. it wasn't really a dump without data. + * Mon Sep 01 2025 Sjoerd Mullender <[email protected]> - 11.53.13-20250901 - Rebuilt. - GH#7692: Illegal argument on range select with equality diff --git a/clients/ChangeLog-Archive b/clients/ChangeLog-Archive --- a/clients/ChangeLog-Archive +++ b/clients/ChangeLog-Archive @@ -1,6 +1,12 @@ # DO NOT EDIT THIS FILE -- MAINTAINED AUTOMATICALLY # This file contains past ChangeLog entries +* Thu Sep 11 2025 Sjoerd Mullender <[email protected]> - 11.53.15-20251104 +- Changed the --describe (-D) option of msqldump to really mean (as it + says in the manual) do a dump without the data. Before, the output + looked like a dump, but could not necessarily be fed back into an + mserver5, i.e. it wasn't really a dump without data. + * Thu Aug 28 2025 Sjoerd Mullender <[email protected]> - 11.53.13-20250901 - We now try to figure out the size of the terminal window on Windows. This means that mclient will, by default, format tabular output to diff --git a/clients/ChangeLog.Mar2025 b/clients/ChangeLog.Mar2025 --- a/clients/ChangeLog.Mar2025 +++ b/clients/ChangeLog.Mar2025 @@ -1,9 +1,3 @@ # ChangeLog file for clients # This file is updated with Maddlog -* Thu Sep 11 2025 Sjoerd Mullender <[email protected]> -- Changed the --describe (-D) option of msqldump to really mean (as it - says in the manual) do a dump without the data. Before, the output - looked like a dump, but could not necessarily be fed back into an - mserver5, i.e. it wasn't really a dump without data. - diff --git a/debian/changelog b/debian/changelog --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,51 @@ +monetdb (11.53.15) unstable; urgency=low + + * Rebuilt. + * GH#7662: Privilege Issue: MonetDB Mar2025-SP1 does not check the + permission of 'DROP ROLE' and 'DROP USER' statements + * GH#7663: Privilege Issue: the `ALTER USER ... DEFAULT ROLE` statement + misses permission checks, which can cause privilege escalation to get + other users' privileges + * GH#7664: Privilege Issue: the `SET SESSION AUTHORIZATION` statement will + enable any user to alter other users' MAX_WORKERS + * GH#7665: MonetDB dev-builds crashes at `sql_trans_drop_trigger()` + * GH#7666: MonetDB Mar2025-SP1 unexpectly shutdown with crafted `GLOBAL + TEMPORARY TABLE` and `ALTER TABLE` statements + * GH#7668: MonetDB Mar2025-SP1 crashes at `key_dup()` + * GH#7669: MonetDB Mar2025-SP1 crashes at `AUTHdecypherValue()` + * GH#7670: MonetDB Mar2025-SP1 crashes at `exp_subtype()` + * GH#7672: MonetDB Mar2025-SP1 crashes at `find_name()` + * GH#7673: MonetDB Mar2025-SP1 crashes at `rel_value_exp2()` + * GH#7674: MonetDB Mar2025-SP1 crashes at `rel_schemas()` + * GH#7689: Empty SQL result (no rows, no columns) + * GH#7699: The OPTIMIZER string value in CREATE USER statement is not + checked on validity. + * GH#7702: Invalid handling of WHERE conditions + * GH#7706: Role (bob) missing + * GH#7710: Monetdb crash when using char datatype + * GH#7730: Incorrect arithmetic in generate_series with month-based + intervals + * GH#7732: Missing column name in select expands to all columns in table + * GH#7733: mserver5 assertion failure when started with -d2 --in-memory + * GH#7734: 'epoch' function doesn't handle fractions with leading zeros + correctly + * GH#7735: crash in Monetdb + * GH#7736: crash in MonetDB + * GH#7737: SQL Query Optimizer / Performance Regression with Merge Tables + in MonetDB 11.53 + * GH#7742: crash in MonetDB + + -- Sjoerd Mullender <[email protected]> Tue, 04 Nov 2025 10:23:58 +0100 + +monetdb (11.53.15) unstable; urgency=low + + * clients: Changed the --describe (-D) option of msqldump to really mean (as it + says in the manual) do a dump without the data. Before, the output + looked like a dump, but could not necessarily be fed back into an + mserver5, i.e. it wasn't really a dump without data. + + -- Sjoerd Mullender <[email protected]> Thu, 11 Sep 2025 10:23:58 +0100 + monetdb (11.53.13) unstable; urgency=low * Rebuilt. _______________________________________________ checkin-list mailing list -- [email protected] To unsubscribe send an email to [email protected]
