[packages/mysql/MYSQL_8_0] Rel 3. Send the password to pre-5.5 servers (backport of Bug#36066161).
arekm
arekm at pld-linux.org
Fri Oct 9 12:28:28 CEST 2026
commit fe50d61df393a3700f0b7819e17ed0fd848e4fc3
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date: Fri Oct 9 12:27:52 2026 +0200
Rel 3. Send the password to pre-5.5 servers (backport of Bug#36066161).
mysql-old-server-auth.patch | 21 +++++++++++++++++++++
mysql.spec | 4 +++-
2 files changed, 24 insertions(+), 1 deletion(-)
---
diff --git a/mysql.spec b/mysql.spec
index eb49995..6efa605 100644
--- a/mysql.spec
+++ b/mysql.spec
@@ -38,7 +38,7 @@ Summary(zh_CN.UTF-8): MySQL数据库服务器
Name: mysql%{majorver}
# keep stable (and not "innovation") line here
Version: 8.0.46
-Release: 2
+Release: 3
License: GPL v2 + MySQL FOSS License Exception
Group: Applications/Databases
#Source0Download: https://dev.mysql.com/downloads/mysql/8.0.html#downloads
@@ -77,6 +77,7 @@ Patch26: mysqldumpslow-clusters.patch
Patch27: mysql-CVE-2026-46862.patch
Patch28: mysql-CVE-2026-46863.patch
Patch29: mysql-2026-07-cpu.patch
+Patch30: mysql-old-server-auth.patch
URL: https://www.mysql.com/products/community/
BuildRequires: bison >= 1.875
%{?with_system_boost:BuildRequires: boost-devel >= 1.77.0}
@@ -514,6 +515,7 @@ Ten pakiet zawiera standardowego demona MySQL NDB CPC.
%patch -P27 -p1
%patch -P28 -p1
%patch -P29 -p1
+%patch -P30 -p1
#%%patch -P26 -p1
diff --git a/mysql-old-server-auth.patch b/mysql-old-server-auth.patch
new file mode 100644
index 0000000..2757b04
--- /dev/null
+++ b/mysql-old-server-auth.patch
@@ -0,0 +1,21 @@
+Servers older than 5.5 (no CLIENT_PLUGIN_AUTH) get an empty password: the
+handshake scramble is tagged caching_sha2_password while the client picks
+mysql_native_password, so the scramble is discarded and an empty auth
+response is sent ("Access denied ... (using password: NO)").
+
+Backport of upstream 8.3/8.4 commit:
+https://github.com/mysql/mysql-server/commit/56b9aaede424d766649382d38fb6a0de3d4e702f
+Bug#36066161: 8.3 client unable authenticate into to 5.0.15 server with
+mysql_native_password
+
+--- a/sql-common/client.cc 2026-10-09 12:22:37.969490343 +0200
++++ b/sql-common/client.cc 2026-10-09 12:22:37.979490343 +0200
+@@ -6921,7 +6921,7 @@
+ }
+ } else {
+ ctx->scramble_data_len = (int)(pkt_end - ctx->scramble_data);
+- ctx->scramble_plugin = caching_sha2_password_plugin_name;
++ ctx->scramble_plugin = native_password_plugin_name;
+ }
+ } else {
+ set_mysql_error(mysql, CR_MALFORMED_PACKET, unknown_sqlstate);
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/mysql.git/commitdiff/fe50d61df393a3700f0b7819e17ed0fd848e4fc3
More information about the pld-cvs-commit
mailing list