← Back to branch summary

~ubuntu-branches/ubuntu/quantal/mysql-5.5/quantal-security

« back to all changes in this revision

Viewing changes to scripts/mysql_system_tables_data.sql

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2014-04-20 09:15:17 UTC
  • mfrom: (1.1.16) (22.1.3 quantal-proposed)
  • Revision ID: package-import@ubuntu.com-20140420091517-15992dpjnkepdvc8
Tags: 5.5.37-0ubuntu0.12.10.1
https://launchpad.net/bugs/1309662
* SECURITY UPDATE: Update to 5.5.37 to fix security issues (LP: #1309662)
  - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
  - CVE-2014-0001
  - CVE-2014-0384
  - CVE-2014-2419
  - CVE-2014-2430
  - CVE-2014-2431
  - CVE-2014-2432
  - CVE-2014-2436
  - CVE-2014-2438
  - CVE-2014-2440
* Drop creation of insecure database permissions:
  - d/p/33_scripts__mysql_create_system_tables__no_test.patch,
    d/p/41_scripts__mysql_install_db.sh__no_test.patch,
    d/p/50_mysql-test__db_test.patch: Restored from mysql-5.1
    package, inadvertently dropped in 5.5 transition. This
    removes the global anonymous access to the database which
    is a security concern.

Show diffs side-by-side

added added

removed removed

Lines of Context:
scripts/mysql_system_tables_data.sql
30
30
-- Fill "db" table with default grants for anyone to
31
31
-- access database 'test' and 'test_%' if "db" table didn't exist
32
32
CREATE TEMPORARY TABLE tmp_db LIKE db;
33
 
INSERT INTO tmp_db VALUES ('%','test','','Y','Y','Y','Y','Y','Y','N','Y','Y','Y','Y','Y','Y','Y','Y','N','N','Y','Y');
34
 
INSERT INTO tmp_db VALUES ('%','test\_%','','Y','Y','Y','Y','Y','Y','N','Y','Y','Y','Y','Y','Y','Y','Y','N','N','Y','Y');
35
33
INSERT INTO db SELECT * FROM tmp_db WHERE @had_db_table=0;
36
34
DROP TABLE tmp_db;
37
35
 
43
41
REPLACE INTO tmp_user SELECT @current_hostname,'root','','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','','','','',0,0,0,0,'','' FROM dual WHERE @current_hostname != 'localhost';
44
42
REPLACE INTO tmp_user VALUES ('127.0.0.1','root','','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','','','','',0,0,0,0,'','');
45
43
REPLACE INTO tmp_user VALUES ('::1','root','','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','Y','','','','',0,0,0,0,'','');
46
 
INSERT INTO tmp_user (host,user) VALUES ('localhost','');
47
 
INSERT INTO tmp_user (host,user) SELECT @current_hostname,'' FROM dual WHERE @current_hostname != 'localhost';
48
44
INSERT INTO user SELECT * FROM tmp_user WHERE @had_user_table=0;
49
45
DROP TABLE tmp_user;
50
46