Path to this page:
Subject: CVS commit: pkgsrc/databases/mysql57-client
From: Maya Rashish
Date: 2019-01-20 19:22:10
Message id: 20190120182210.DD353FB16@cvs.NetBSD.org
Log Message:
mysql57-client: change the default configuration to avoid information
disclosure to a malicious server.
Backport of upstream commit:
https://github.com/mysql/mysql-server/commit/98ed3d8bc8ad724686d26c7bf98dced3bd1777be
Exploit method described here:
https://gwillem.gitlab.io/2019/01/17/adminer-4.6.2-file-disclosure-vulnerability/
Files: