-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 29 May 2025 22:11:53 +0200 Source: mydumper Binary: mydumper mydumper-dbgsym Architecture: ppc64el Version: 0.10.1-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Lee Garrett Description: mydumper - High-performance MySQL backup tool Changes: mydumper (0.10.1-1+deb12u2) bookworm; urgency=medium . * Non-maintainer upload by the Debian LTS team. * Fix CVE-2025-30224: - The MySQL C client library (libmysqlclient) allows authenticated remote actors to read arbitrary files from client systems via a crafted server response to LOAD LOCAL INFILE query, leading to sensitive information disclosure when clients connect to untrusted MySQL servers without explicitly disabling the local infile capability. Mydumper had the local infile option enabled by default and does not have an option to disable it. This can lead to an unexpected arbitrary file read if the Mydumper tool connects to an untrusted server. * Add autopkgtest integration tests * Add debian/gbp.conf Checksums-Sha1: 588bc8e83942cce3f04c704d899af80236dcff00 120948 mydumper-dbgsym_0.10.1-1+deb12u2_ppc64el.deb 3f6d08590b8505e346ce665da4660c91c0a08bd0 9664 mydumper_0.10.1-1+deb12u2_ppc64el-buildd.buildinfo f2bea2457229e9b9eba012dbd81c001fa0489ada 47268 mydumper_0.10.1-1+deb12u2_ppc64el.deb Checksums-Sha256: 8c3ad9691eb9275fc90d4321dadc32d4b0efb53326f1f888838bd3a8c96228f7 120948 mydumper-dbgsym_0.10.1-1+deb12u2_ppc64el.deb 5a2d0cc9ddaf2eec6397bb8c345c0c942cf660f31dac63c6fa98c49f0b41540f 9664 mydumper_0.10.1-1+deb12u2_ppc64el-buildd.buildinfo 5b94951f4f94f99f7560f65cc8a396d08128c6250685e375df3dfe717757dc66 47268 mydumper_0.10.1-1+deb12u2_ppc64el.deb Files: 4d3adfae5c7c57293918b39ce9975cf1 120948 debug optional mydumper-dbgsym_0.10.1-1+deb12u2_ppc64el.deb 5cb4008254b958b7a719061e3fb630af 9664 database extra mydumper_0.10.1-1+deb12u2_ppc64el-buildd.buildinfo d55aad12e1cb966feca6b4f63f4e9ad3 47268 database extra mydumper_0.10.1-1+deb12u2_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZAv/jpGRqS40qyb11oy1TpxF0ZAFAmjB54AACgkQ1oy1TpxF 0ZDRFA/+K3JR6HK0JPqpXjtOhCCF4nawBYLEywVpUi/P64BhgzrQ2iaTmuvoXLvg of8UmlbHCCo7jfCsGnZYgKXo2WUaobgOePscuy7ODlk5xEuD2jMgG7/Rt/O7pd75 mfPkwLXc5ZD02oGu+e9Jtzli7XSV8hqVsWpLk44SE1YYycPov/F2DGsX7kSFc+Rv sqVMfU5muI8xiTsb32KXi+HGWFyj7OgaUBlZafCJ4bmiVZ7Mnwli8uBl6ycrZppg ZrxYnFdAAzyKZYs1kl64xOVYU0HdJa5G4C0TU8vCV1Ii0VhB1AhB8rxxu5m2Ibrj 5SD2tUnV5Qzkv3Lo1cvpP7xT5YrPGTrWeSvYvbyColJwrKbQeTceWQuNXXGXioXw u71StOMU4clklJxrqkqJppCcylinWraUOsjEQvB1wJZ3xeCf1bCL+3AwQWKEVnVp 8+Yqq53e1XEwf5LTV3jm47qghML0VapTPp7Dr43d0KeR47u/I4smqHxZxp9wKyyY aL6u1L3GzbpzUCmPLybQuqTb/XCYDvuGvmjNcSlf7qsLZoaVVackQw8HXEBMJgqK D5JB7lbhoX2CuOPK/7Qw3ONwCN0JHD4noUNa8MDWoNr7wGoxMv0ftCl7Ciz4F6JP QGdpce/N2jYQyq3KNZUBcBSErtHersmDYbfy7ODDh7IPpbMPduo= =Cjrf -----END PGP SIGNATURE-----