S-091: MySQL Security Update


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-091: MySQL Security Update
# 1  
Old 12-24-2007
S-091: MySQL Security Update

Several flaws were found in a way:1) MySQL handled symbolic links when database tables were created with explicit "DATE" and "INDEX DIRECTORY" options; and2) MySQL's InnoDB engine handled spatial indexes. The risk is LOW. Data destruction - overwrites tables.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. Programming

MYSQL - trigger update on record insert or update

Right I have a MYSQL database with table1 with 3 columns, colA, colB and colC. I want to combine the data in the 3 columns into a 4th column names col_comb. Here's the SQL command that works: UPDATE table1 SET `col_comb` = CONCAT( `colA` , ' - ', `colB` , ', ', `colC` ); So now I want this... (5 Replies)
Discussion started by: barrydocks
5 Replies
Login or Register to Ask a Question
grass-mesql(1grass)						Grass User's Manual					       grass-mesql(1grass)

NAME
grass-mesql - MySQL embedded driver MySQL embedded driver MySQL embedded driver in GRASS MySQL database driver in GRASS enables GRASS to store vector attributes in MySQL embedded database without necessity to run MySQL server. Driver and database name GRASS modules require 2 parameters to connect to a database. Those parameters are 'driver' and 'database'. For MySQL embedded driver the parameter 'driver' should be set to value 'mesql'. The parameter 'database' is a full path to the directory where database tables are stored. The best place is a directory in the mapset. The directory must be created before use of the driver. In the name of database it is possible to use 3 variables: $GISDBASE - path to current GISBASE $LOCATION_NAME - name of current location $MAPSET - name of current mapset Examples of connection parameters: db.connect driver=mesql database='$GISDBASE/$LOCATION_NAME/$MAPSET/mysql' db.connect driver=mesql database=/home/user1/db Data types, indexes For more informations about supported data types and indexes see the documentation for MySQL (mysql) driver Database type Because database closing was found very slow if InnoDB was used, the InnoDB storage is disabled by default (hardcoded '--skip-innodb' server option). Note The embedded server is started with hardcoded '--bootstrap' option to avoid warning about missing mysql.time_zone_leap_second table. This can be fixed in future. SEE ALSO
db.connect, SQL support in GRASS GIS Credits Development of the driver was sponsored by Faunalia (Italy) as part of a project for ATAC. AUTHOR
Radim Blazek Last changed: $Date: 2011-02-07 18:59:50 +0100 (Mon, 07 Feb 2011) $ Help Index GRASS 6.4.2 grass-mesql(1grass)