group.of.nepali.translators team mailing list archive

Thread
Date

[Bug 1574458] Re: Logs.var.log.mysql.error.log.txt contains usernames and passwords

To: group.of.nepali.translators@xxxxxxxxxxxxxxxxxxx
From: Robie Basak <1574458@xxxxxxxxxxxxxxxxxx>
Date: Wed, 13 Jul 2016 14:18:46 -0000
Reply-to: Bug 1574458 <1574458@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

The apport hook is no longer sending passwords as of 5.7.13-0ubuntu1 in
Yakkety. Adding a task for Xenial.

I'm preparing an SRU for Xenial that will include this fix.

Seth, alternatively do you want it in the security pocket? Though that
would mess with my planned SRU a little. We can arrange something if
needed.

** Changed in: mysql-5.7 (Ubuntu)
       Status: In Progress => Fix Released

** Also affects: mysql-5.5 (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Also affects: mysql-5.6 (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Also affects: mariadb-5.5 (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Also affects: mariadb-10.0 (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Also affects: mysql-5.7 (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Changed in: mysql-5.7 (Ubuntu Xenial)
       Status: New => In Progress

** Changed in: mysql-5.7 (Ubuntu Xenial)
     Assignee: (unassigned) => Robie Basak (racb)

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1574458

Title:
  Logs.var.log.mysql.error.log.txt  contains usernames and passwords

Status in mariadb-10.0 package in Ubuntu:
  New
Status in mariadb-5.5 package in Ubuntu:
  New
Status in mysql-5.5 package in Ubuntu:
  New
Status in mysql-5.6 package in Ubuntu:
  New
Status in mysql-5.7 package in Ubuntu:
  Fix Released
Status in mariadb-10.0 source package in Xenial:
  New
Status in mariadb-5.5 source package in Xenial:
  New
Status in mysql-5.5 source package in Xenial:
  New
Status in mysql-5.6 source package in Xenial:
  New
Status in mysql-5.7 source package in Xenial:
  In Progress

Bug description:
  Your automated bug reports are posting
  Logs.var.log.mysql.error.log.txt  in clear text.  These logs may
  contain PII as well as user credentials.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mariadb-10.0/+bug/1574458/+subscriptions