I don't think having the port open by default is acceptable. It was
clearly an oversight when the new MySQL version was prepared, and I
suspect a lot of users are now running an open port without knowing
about it.
While publishing out an update that closes the port may break certain
configurations, I don't think it is appropriate to leave it open by
default.
As such, I will be preparing a security update for focal that closes the
open port, along with an appropriate USN that notifies users about the
change in behaviour.
** Changed in: mysql-8.0 (Ubuntu Focal)
Assignee: (unassigned) => Marc Deslauriers (mdeslaur)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1857584
Title:
MySQL X protocol port 33060 listening on network by default
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mysql-8.0/+bug/1857584/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
