Changeset: f890f6d4d85f for MonetDB URL: https://dev.monetdb.org/hg/MonetDB/rev/f890f6d4d85f Modified Files: MonetDB.spec cmake/monetdb-versions.cmake Branch: default Log Message:
Merge with Mar2025 branch. diffs (189 lines): diff --git a/.hgtags b/.hgtags --- a/.hgtags +++ b/.hgtags @@ -848,3 +848,4 @@ 6d5be335a6c739e61682366f7a84b67b0cfc0be6 a63e11c1fd1b2dfba2a0ed8a985455286bc023d3 Mar2025_11 00d41c24cb9d5c43bd35e9e02e6a739a65c02810 Mar2025_13 00d41c24cb9d5c43bd35e9e02e6a739a65c02810 Mar2025_SP2_release +2842c30252114ac29284da18825ed15f86bc507f Mar2025_15 diff --git a/MonetDB.spec b/MonetDB.spec --- a/MonetDB.spec +++ b/MonetDB.spec @@ -95,7 +95,7 @@ Group: Applications/Databases License: MPL-2.0 URL: https://www.monetdb.org/ BugURL: https://github.com/MonetDB/MonetDB/issues -Source: https://www.monetdb.org/downloads/sources/Mar2025-SP2/MonetDB-%{version}.tar.bz2 +Source: https://www.monetdb.org/downloads/sources/Mar2025-SP3/MonetDB-%{version}.tar.bz2 # The Fedora packaging document says we need systemd-rpm-macros for # the _unitdir and _tmpfilesdir macros to exist; however on RHEL 7 @@ -1057,6 +1057,48 @@ rm "${RPM_BUILD_ROOT}"%{_unitdir}/monetd %endif %changelog +* Tue Nov 04 2025 Sjoerd Mullender <[email protected]> - 11.53.15-20251104 +- Rebuilt. +- GH#7662: Privilege Issue: MonetDB Mar2025-SP1 does not check the + permission of 'DROP ROLE' and 'DROP USER' statements +- GH#7663: Privilege Issue: the `ALTER USER ... DEFAULT ROLE` statement + misses permission checks, which can cause privilege escalation to get + other users' privileges +- GH#7664: Privilege Issue: the `SET SESSION AUTHORIZATION` statement will + enable any user to alter other users' MAX_WORKERS +- GH#7665: MonetDB dev-builds crashes at `sql_trans_drop_trigger()` +- GH#7666: MonetDB Mar2025-SP1 unexpectly shutdown with crafted `GLOBAL + TEMPORARY TABLE` and `ALTER TABLE` statements +- GH#7668: MonetDB Mar2025-SP1 crashes at `key_dup()` +- GH#7669: MonetDB Mar2025-SP1 crashes at `AUTHdecypherValue()` +- GH#7670: MonetDB Mar2025-SP1 crashes at `exp_subtype()` +- GH#7672: MonetDB Mar2025-SP1 crashes at `find_name()` +- GH#7673: MonetDB Mar2025-SP1 crashes at `rel_value_exp2()` +- GH#7674: MonetDB Mar2025-SP1 crashes at `rel_schemas()` +- GH#7689: Empty SQL result (no rows, no columns) +- GH#7699: The OPTIMIZER string value in CREATE USER statement is not + checked on validity. +- GH#7702: Invalid handling of WHERE conditions +- GH#7706: Role (bob) missing +- GH#7710: Monetdb crash when using char datatype +- GH#7730: Incorrect arithmetic in generate_series with month-based + intervals +- GH#7732: Missing column name in select expands to all columns in table +- GH#7733: mserver5 assertion failure when started with -d2 --in-memory +- GH#7734: 'epoch' function doesn't handle fractions with leading zeros + correctly +- GH#7735: crash in Monetdb +- GH#7736: crash in MonetDB +- GH#7737: SQL Query Optimizer / Performance Regression with Merge Tables + in MonetDB 11.53 +- GH#7742: crash in MonetDB + +* Thu Sep 11 2025 Sjoerd Mullender <[email protected]> - 11.53.15-20251104 +- clients: Changed the --describe (-D) option of msqldump to really mean (as it + says in the manual) do a dump without the data. Before, the output + looked like a dump, but could not necessarily be fed back into an + mserver5, i.e. it wasn't really a dump without data. + * Mon Sep 01 2025 Sjoerd Mullender <[email protected]> - 11.53.13-20250901 - Rebuilt. - GH#7692: Illegal argument on range select with equality diff --git a/clients/ChangeLog-Archive b/clients/ChangeLog-Archive --- a/clients/ChangeLog-Archive +++ b/clients/ChangeLog-Archive @@ -1,6 +1,12 @@ # DO NOT EDIT THIS FILE -- MAINTAINED AUTOMATICALLY # This file contains past ChangeLog entries +* Thu Sep 11 2025 Sjoerd Mullender <[email protected]> - 11.53.15-20251104 +- Changed the --describe (-D) option of msqldump to really mean (as it + says in the manual) do a dump without the data. Before, the output + looked like a dump, but could not necessarily be fed back into an + mserver5, i.e. it wasn't really a dump without data. + * Thu Aug 28 2025 Sjoerd Mullender <[email protected]> - 11.53.13-20250901 - We now try to figure out the size of the terminal window on Windows. This means that mclient will, by default, format tabular output to diff --git a/clients/ChangeLog.Mar2025 b/clients/ChangeLog.Mar2025 --- a/clients/ChangeLog.Mar2025 +++ b/clients/ChangeLog.Mar2025 @@ -1,9 +1,3 @@ # ChangeLog file for clients # This file is updated with Maddlog -* Thu Sep 11 2025 Sjoerd Mullender <[email protected]> -- Changed the --describe (-D) option of msqldump to really mean (as it - says in the manual) do a dump without the data. Before, the output - looked like a dump, but could not necessarily be fed back into an - mserver5, i.e. it wasn't really a dump without data. - diff --git a/cmake/monetdb-versions.cmake b/cmake/monetdb-versions.cmake --- a/cmake/monetdb-versions.cmake +++ b/cmake/monetdb-versions.cmake @@ -44,20 +44,20 @@ set(MONETDB_VERSION "${MONETDB_VERSION_M # common/options and common/utils) set(GDK_VERSION_MAJOR "30") set(GDK_VERSION_MINOR "1") -set(GDK_VERSION_PATCH "3") +set(GDK_VERSION_PATCH "4") set(GDK_VERSION "${GDK_VERSION_MAJOR}.${GDK_VERSION_MINOR}.${GDK_VERSION_PATCH}") # version of the MAPI library (subdirectory clients/mapilib) set(MAPI_VERSION_MAJOR "28") set(MAPI_VERSION_MINOR "0") -set(MAPI_VERSION_PATCH "3") +set(MAPI_VERSION_PATCH "4") set(MAPI_VERSION "${MAPI_VERSION_MAJOR}.${MAPI_VERSION_MINOR}.${MAPI_VERSION_PATCH}") # version of the MONETDB5 library (subdirectory monetdb5, not including # extras, and tools/utils/msabaoth.[ch]) set(MONETDB5_VERSION_MAJOR "37") set(MONETDB5_VERSION_MINOR "0") -set(MONETDB5_VERSION_PATCH "4") +set(MONETDB5_VERSION_PATCH "5") set(MONETDB5_VERSION "${MONETDB5_VERSION_MAJOR}.${MONETDB5_VERSION_MINOR}.${MONETDB5_VERSION_PATCH}") # version of the MONETDBE library (subdirectory tools/monetdbe) @@ -75,7 +75,7 @@ set(MUTILS_VERSION "${MUTILS_VERSION_MAJ # version of the SQL library (subdirectory sql) set(SQL_VERSION_MAJOR "16") set(SQL_VERSION_MINOR "1") -set(SQL_VERSION_PATCH "3") +set(SQL_VERSION_PATCH "4") set(SQL_VERSION "${SQL_VERSION_MAJOR}.${SQL_VERSION_MINOR}.${SQL_VERSION_PATCH}") # version of the STREAM library (subdirectory common/stream) diff --git a/debian/changelog b/debian/changelog --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,51 @@ +monetdb (11.53.15) unstable; urgency=low + + * Rebuilt. + * GH#7662: Privilege Issue: MonetDB Mar2025-SP1 does not check the + permission of 'DROP ROLE' and 'DROP USER' statements + * GH#7663: Privilege Issue: the `ALTER USER ... DEFAULT ROLE` statement + misses permission checks, which can cause privilege escalation to get + other users' privileges + * GH#7664: Privilege Issue: the `SET SESSION AUTHORIZATION` statement will + enable any user to alter other users' MAX_WORKERS + * GH#7665: MonetDB dev-builds crashes at `sql_trans_drop_trigger()` + * GH#7666: MonetDB Mar2025-SP1 unexpectly shutdown with crafted `GLOBAL + TEMPORARY TABLE` and `ALTER TABLE` statements + * GH#7668: MonetDB Mar2025-SP1 crashes at `key_dup()` + * GH#7669: MonetDB Mar2025-SP1 crashes at `AUTHdecypherValue()` + * GH#7670: MonetDB Mar2025-SP1 crashes at `exp_subtype()` + * GH#7672: MonetDB Mar2025-SP1 crashes at `find_name()` + * GH#7673: MonetDB Mar2025-SP1 crashes at `rel_value_exp2()` + * GH#7674: MonetDB Mar2025-SP1 crashes at `rel_schemas()` + * GH#7689: Empty SQL result (no rows, no columns) + * GH#7699: The OPTIMIZER string value in CREATE USER statement is not + checked on validity. + * GH#7702: Invalid handling of WHERE conditions + * GH#7706: Role (bob) missing + * GH#7710: Monetdb crash when using char datatype + * GH#7730: Incorrect arithmetic in generate_series with month-based + intervals + * GH#7732: Missing column name in select expands to all columns in table + * GH#7733: mserver5 assertion failure when started with -d2 --in-memory + * GH#7734: 'epoch' function doesn't handle fractions with leading zeros + correctly + * GH#7735: crash in Monetdb + * GH#7736: crash in MonetDB + * GH#7737: SQL Query Optimizer / Performance Regression with Merge Tables + in MonetDB 11.53 + * GH#7742: crash in MonetDB + + -- Sjoerd Mullender <[email protected]> Tue, 04 Nov 2025 10:23:58 +0100 + +monetdb (11.53.15) unstable; urgency=low + + * clients: Changed the --describe (-D) option of msqldump to really mean (as it + says in the manual) do a dump without the data. Before, the output + looked like a dump, but could not necessarily be fed back into an + mserver5, i.e. it wasn't really a dump without data. + + -- Sjoerd Mullender <[email protected]> Thu, 11 Sep 2025 10:23:58 +0100 + monetdb (11.53.13) unstable; urgency=low * Rebuilt. _______________________________________________ checkin-list mailing list -- [email protected] To unsubscribe send an email to [email protected]
