diff --git a/mysql-boost-8.0.43.tar.gz b/mysql-boost-8.0.43.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..b9cf6034677ceb86475331246f018d9633c8a513 Binary files /dev/null and b/mysql-boost-8.0.43.tar.gz differ diff --git a/mysql-c99.patch b/mysql-c99.patch new file mode 100644 index 0000000000000000000000000000000000000000..935e64f07aabfed0610ebe3abad74e95e836db3e --- /dev/null +++ b/mysql-c99.patch @@ -0,0 +1,12 @@ +diff -ur mysql-8.0.35.orig/plugin/innodb_memcached/daemon_memcached/daemon/memcached.c mysql-8.0.35/plugin/innodb_memcached/daemon_memcached/daemon/memcached.c +--- mysql-8.0.35.orig/plugin/innodb_memcached/daemon_memcached/daemon/memcached.c 2023-10-12 13:45:01.000000000 +0200 ++++ mysql-8.0.35/plugin/innodb_memcached/daemon_memcached/daemon/memcached.c 2023-12-19 10:48:46.718006624 +0100 +@@ -4070,7 +4070,7 @@ + do { + while(key_token->length != 0) { + /* whether there are more keys to fetch */ +- bool next_get = (key_token + 1)->value; ++ bool next_get = (key_token + 1)->value != NULL; + + key = key_token->value; + nkey = key_token->length; diff --git a/mysql.spec b/mysql.spec index 20fdbe079636567adb8f0934ebecef48e24953e2..32a0013e43d6a768c42dd3c5751874280ab8738a 100644 --- a/mysql.spec +++ b/mysql.spec @@ -1,4 +1,4 @@ -%define anolis_release 1 +%define anolis_release 2 # Name of the package without any prefixes %global pkg_name %{name} %global pkgnamepatch mysql @@ -75,7 +75,7 @@ %global sameevr %{?epoch:%{epoch}:}%{version}-%{release} Name: mysql -Version: 8.0.43 +Version: 8.0.43 Release: %{anolis_release}%{?dist} Summary: MySQL client programs and shared libraries URL: http://www.mysql.com @@ -122,6 +122,7 @@ Patch113: add-loongarch64-support-for-mysql.patch #add support for riscv64 Patch114: riscv-lock-free.patch +Patch115: mysql-c99.patch BuildRequires: cmake BuildRequires: gcc-c++ @@ -198,6 +199,7 @@ BuildRequires: make BuildRequires: libfido2-devel + Requires: bash coreutils grep Requires: %{name}-common = %{sameevr} @@ -937,6 +939,8 @@ fi %endif %changelog +* Thu Nov 27 2025 wenyuzifang - 8.0.43-2 +- Fix null pointer risk and improve code clarity by enforcing explicit NULL checks * Tue Jul 29 2025 wenxin - 8.0.43-1 - update 8.0.43 - fix cve CVE-2025-50081