The real problem is the lack of a central knowledgebase. Is there one that I'm not aware of? Even if there is, it should be very obvious off the front page of the website.
> -----Original Message----- > From: Csongor Fagyal [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, December 18, 2002 5:34 AM > To: [EMAIL PROTECTED] > Subject: Re: MySQL security flaws uncovered > > > Michael She wrote: > > > It's bad for business : ) > > > > Maybe they're taking the MS route. > > I second this. These vulnerabilities are serious, they must be given > more attention. Apache, PHP, RedHat and so on and so on are > very careful > with issues like this, all vulnerabilities/exploits are immediately > published through all possible channels. Yes, it is always a pain to > find out something like this, obviously the MySQL team just > would like > to forget this once and for all, but doing troublesome > reinstalls/upgrades and so on is still better then getting our system > hacked. > > - Cs. > > > > > > > > > At 12:19 AM 12/18/2002 -0500, Michael Bacarella wrote: > > > >> A good question posted to another list.. > >> > >> ---- forwarded message follows ---- > >> > >> > Several vulnerabilities have been found in the MySQL > database system, a > >> > light database package commonly used in Linux environments but > >> which runs > >> > also on Microsoft platforms, HP-Unix, Mac OS and more. > >> > http://zdnet.com.com/2100-1104-977958.html > >> > >> So why no mention on the MySQL.COM site? That rather bugs me. In > >> contrast, > >> sites for products like Apache or Bind are very clear > about current/past > >> security issues. > >> > >> Is MySQL.COM the wrong place? > > > > > > --------------------------------------------------------------------- Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail <[EMAIL PROTECTED]> To unsubscribe, e-mail <[EMAIL PROTECTED]> Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php