how to patch mysql vulnerability

Asked by yugraj

I am using mysql-server-5.1.41 in ubuntu.10.4 LTS (ubuntu 2.6.32) there were some vulnerabilty in mysql so where to get patch and how to run it i dnt want mysql version should be upgrade.

Thanks
Rai

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu mysql-dfsg-5.1 Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
mycae (mycae) said :
#1

You can rebuild from source. Note that because you are building from source, nothing is guaranteed to work -- you are having to do the hard yards that are normally done by Debian and ubuntu maintainers.

Follow these instructions:
http://www.moosechips.com/2008/09/ubuntu-rebuild-a-source-package/

*Except*

where he does this:
apt-get source foo

you need to manually download the newer maverick or natty packages (your choice)

http://packages.ubuntu.com/maverick/mysql-server
http://packages.ubuntu.com/natty/mysql-server

You need to get the three links on the right hand side (.orig.tar.gz, .diff.gz and .dsc), and place them all in the same folder. Then you need to extract them using dpkg-source by executing this command in that folder:

dpkg-source -X *.dsc

Then keep following that guys instructions.

Note that if there are any packages that depend upon mysql-server, it may be that you need to rebuild them too.

 I would not do this on a production machine unless you are very certain that you know what you are doing.

install the compilation tools in the package "build-essential"

Revision history for this message
yugraj (yugrajr) said :
#2

what my problem is i have mysql-server.5.1.41 running on production but its not from source code is normal.
i cant use source code now and i m not allowed to upgrade mysql version as well
i only want to fix vulnerabilty using patch is there anyway pls suggest

Thanks for the support

Thanks
Yugraj Rai

Revision history for this message
mycae (mycae) said :
#3

Any patches to fix these issues are only applied against source code.

Can you help with this problem?

Provide an answer of your own, or ask yugraj for more information if necessary.

To post a message you must log in.