{"id":2432,"date":"2012-07-20T15:25:44","date_gmt":"2012-07-20T20:25:44","guid":{"rendered":"http:\/\/www.bytebot.net\/blog\/?p=2432"},"modified":"2012-07-20T15:25:48","modified_gmt":"2012-07-20T20:25:48","slug":"security-fixes-in-mysql-critical-patch-updates","status":"publish","type":"post","link":"https:\/\/www.bytebot.net\/blog\/archives\/2012\/07\/20\/security-fixes-in-mysql-critical-patch-updates","title":{"rendered":"Security fixes in MySQL &#038; critical patch updates"},"content":{"rendered":"<p>This is the third time MySQL has made an entry into the <a href=\"http:\/\/www.oracle.com\/technetwork\/topics\/security\/cpujul2012-392727.html\">Oracle Critical Patch Update Advisory<\/a> service. The first time, we at <a href=\"http:\/\/mariadb.org\/\">Team MariaDB<\/a> came up with an analysis:\u00a0<a href=\"http:\/\/blog.montyprogram.com\/oracles-27-mysql-security-fixes-and-mariadb\/\">Oracle\u2019s 27 MySQL security fixes and MariaDB<\/a>.<\/p>\n<p>Security is important to a DBA. Having vague explanations does no one any good. Even Oracle ACE Director <a href=\"http:\/\/ronaldbradford.com\/\">Ronald Bradford<\/a> chooses to <a href=\"http:\/\/ronaldbradford.com\/blog\/new-security-fixes-for-mysql-reported-2012-07-18\/\">ask some tough questions<\/a>\u00a0on this issue. Recently we found a bug in MySQL &amp; MariaDB and did some <a href=\"http:\/\/blog.montyprogram.com\/monty-program-skysql-a-statement-on-the-serious-security-vulnerability-that-was-found-in-mariadb-and-mysql\/\">responsible disclosure<\/a> as well.\u00a0<\/p>\n<p>Security is a big deal to distributions shipping MySQL. It comes alongside having a good, accessible bugs system. Recall a <a href=\"https:\/\/lists.launchpad.net\/maria-discuss\/msg00514.html\">discussion<\/a> a while back about possibly even replacing MySQL with MariaDB (this led to a fun discussion and a long meeting at UDS Oakland to ensure choice).<\/p>\n<p>These discussions always come back. Today on the Debian mailing list, the <a href=\"http:\/\/lists.alioth.debian.org\/pipermail\/pkg-mysql-maint\/2012-July\/005123.html\">suggestion popped back up again<\/a>. I&#8217;m sure it will pop up again in October when the next CPU includes some fixes in MySQL&#8230;<\/p>\n<p>What is Oracle going to do about this? Will it start being more open (not with a select few folk, but with the wider community)?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This is the third time MySQL has made an entry into the Oracle Critical Patch Update Advisory service. The first time, we at Team MariaDB came up with an analysis:\u00a0Oracle\u2019s 27 MySQL security fixes and MariaDB. Security is important to a DBA. Having vague explanations does no one any good. Even Oracle ACE Director Ronald [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1064,23],"tags":[330,1052,1775,68],"class_list":["post-2432","post","type-post","status-publish","format-standard","hentry","category-mariadb-databases","category-mysql","tag-bugs","tag-mariadb","tag-mysql","tag-security"],"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/p4vJD-De","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts\/2432","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/comments?post=2432"}],"version-history":[{"count":2,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts\/2432\/revisions"}],"predecessor-version":[{"id":2434,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts\/2432\/revisions\/2434"}],"wp:attachment":[{"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/media?parent=2432"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/categories?post=2432"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/tags?post=2432"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}