Skip to content
  • Sivert Sorumgard's avatar
    1278f5dd
    Bug#24388753: PRIVILEGE ESCALATION USING MYSQLD_SAFE · 1278f5dd
    Sivert Sorumgard authored
    [This is the 5.7/8.0 version of the bugfix].
    
    The problem was that it was possible to write log files ending
    in .ini/.cnf that later could be parsed as an options file.
    This made it possible for users to specify startup options
    without the permissions to do so.
    
    This patch fixes the problem by disallowing general query log
    and slow query log to be written to files ending in .ini and .cnf.
    
    (cherry picked from commit 173c8ae067098acdedf031740ab78b99652abbdb)
    1278f5dd
    Bug#24388753: PRIVILEGE ESCALATION USING MYSQLD_SAFE
    Sivert Sorumgard authored
    [This is the 5.7/8.0 version of the bugfix].
    
    The problem was that it was possible to write log files ending
    in .ini/.cnf that later could be parsed as an options file.
    This made it possible for users to specify startup options
    without the permissions to do so.
    
    This patch fixes the problem by disallowing general query log
    and slow query log to be written to files ending in .ini and .cnf.
    
    (cherry picked from commit 173c8ae067098acdedf031740ab78b99652abbdb)
Loading