Package: mysql-server-5.1 Version: 5.1.41-3 Severity: minor
The default Debian security policy for MySQL is to set `bind-address = 127.0.0.1` for mysqld. However the examples in /usr/share/doc/mysql-server-5.1/examples do not include this line. Thus if a server administrator experiments with optimizing MySQL by using these config files as-is it's easy to turn what was previously a loopback-only mysqld setup into a setup where the server listens on a public IP address. -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (650, 'testing'), (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-x86_64-linode11 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages mysql-server-5.1 depends on: ii adduser 3.112 add and remove users and groups ii debconf [debconf-2.0] 1.5.28 Debian configuration management sy ii libc6 2.10.2-2 GNU C Library: Shared libraries ii libdbi-perl 1.609-1 Perl Database Interface (DBI) ii libgcc1 1:4.4.2-9 GCC support library ii libmysqlclient16 5.1.41-3 MySQL database client library ii libstdc++6 4.4.2-9 The GNU Standard C++ Library v3 ii libwrap0 7.6.q-18 Wietse Venema's TCP wrappers libra ii lsb-base 3.2-23 Linux Standard Base 3.2 init scrip ii mysql-client-5.1 5.1.41-3 MySQL database client binaries ii mysql-common 5.1.41-3 MySQL database common files (e.g. ii passwd 1:4.1.4.2-1 change and administer password and ii perl 5.10.1-11 Larry Wall's Practical Extraction ii psmisc 22.10-1 utilities that use the proc file s ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime Versions of packages mysql-server-5.1 recommends: ii heirloom-mailx [mailx] 12.4-1.1+b1 feature-rich BSD mail(1) ii libhtml-template-perl 2.9-1 HTML::Template : A module for usin Versions of packages mysql-server-5.1 suggests: pn tinyca <none> (no description available) -- debconf information excluded -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
