[packages/mysql/MYSQL_8_0] Rel 3. Send the password to pre-5.5 servers (backport of Bug#36066161).

arekm arekm at pld-linux.org
Fri Oct 9 12:28:28 CEST 2026


commit fe50d61df393a3700f0b7819e17ed0fd848e4fc3
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Fri Oct 9 12:27:52 2026 +0200

    Rel 3. Send the password to pre-5.5 servers (backport of Bug#36066161).

 mysql-old-server-auth.patch | 21 +++++++++++++++++++++
 mysql.spec                  |  4 +++-
 2 files changed, 24 insertions(+), 1 deletion(-)
---
diff --git a/mysql.spec b/mysql.spec
index eb49995..6efa605 100644
--- a/mysql.spec
+++ b/mysql.spec
@@ -38,7 +38,7 @@ Summary(zh_CN.UTF-8):	MySQL数据库服务器
 Name:		mysql%{majorver}
 # keep stable (and not "innovation") line here
 Version:	8.0.46
-Release:	2
+Release:	3
 License:	GPL v2 + MySQL FOSS License Exception
 Group:		Applications/Databases
 #Source0Download: https://dev.mysql.com/downloads/mysql/8.0.html#downloads
@@ -77,6 +77,7 @@ Patch26:	mysqldumpslow-clusters.patch
 Patch27:	mysql-CVE-2026-46862.patch
 Patch28:	mysql-CVE-2026-46863.patch
 Patch29:	mysql-2026-07-cpu.patch
+Patch30:	mysql-old-server-auth.patch
 URL:		https://www.mysql.com/products/community/
 BuildRequires:	bison >= 1.875
 %{?with_system_boost:BuildRequires:	boost-devel >= 1.77.0}
@@ -514,6 +515,7 @@ Ten pakiet zawiera standardowego demona MySQL NDB CPC.
 %patch -P27 -p1
 %patch -P28 -p1
 %patch -P29 -p1
+%patch -P30 -p1
 
 #%%patch -P26 -p1
 
diff --git a/mysql-old-server-auth.patch b/mysql-old-server-auth.patch
new file mode 100644
index 0000000..2757b04
--- /dev/null
+++ b/mysql-old-server-auth.patch
@@ -0,0 +1,21 @@
+Servers older than 5.5 (no CLIENT_PLUGIN_AUTH) get an empty password: the
+handshake scramble is tagged caching_sha2_password while the client picks
+mysql_native_password, so the scramble is discarded and an empty auth
+response is sent ("Access denied ... (using password: NO)").
+
+Backport of upstream 8.3/8.4 commit:
+https://github.com/mysql/mysql-server/commit/56b9aaede424d766649382d38fb6a0de3d4e702f
+Bug#36066161: 8.3 client unable authenticate into to 5.0.15 server with
+mysql_native_password
+
+--- a/sql-common/client.cc	2026-10-09 12:22:37.969490343 +0200
++++ b/sql-common/client.cc	2026-10-09 12:22:37.979490343 +0200
+@@ -6921,7 +6921,7 @@
+       }
+     } else {
+       ctx->scramble_data_len = (int)(pkt_end - ctx->scramble_data);
+-      ctx->scramble_plugin = caching_sha2_password_plugin_name;
++      ctx->scramble_plugin = native_password_plugin_name;
+     }
+   } else {
+     set_mysql_error(mysql, CR_MALFORMED_PACKET, unknown_sqlstate);
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/mysql.git/commitdiff/fe50d61df393a3700f0b7819e17ed0fd848e4fc3



More information about the pld-cvs-commit mailing list