Skip navigation links
5.4.4 Changes in MySQL 5.5.0 (07 December 2009 Milestone 2) »
Section Navigation      [Toggle]

5.4.3. Changes in MySQL 5.5.1 (04 January 2010)

When the publishing process for MySQL 5.5.1-m2 was already running, the MySQL team was informed about a security problem in the SSL connect area (a possibility to crash the server). The problem is caused by a buffer overflow in the yaSSL library. MySQL Servers using OpenSSL are not affected; it can only occur when SSL (using yaSSL) is enabled.

This problem is still under detailed investigation with the various versions, configurations, and platforms. When that has finished, the problem will be fixed as soon as possible, and new binaries for the affected versions will be released. However, building and testing these binaries in the various configurations on the various platforms will take some time.

The bug is tracked with CVE ID CVE-2009-4484. We repeat the general security hint: If it is not absolutely necessary that external machines can connect to your database instance, we recommend that the server's connection port be blocked by a firewall to prevent any such illegitimate accesses.

Bugs fixed:

  • Incompatible Change: Replication: The file names for the semisynchronous plugins were prefixed with lib, unlike file names for other plugins. The file names no longer have a lib prefix.

    This change introduces an incompatibility if the plugins had been installed using the previous names. To handle this, uninstall the older version before installing the newer version. For example, use these statements for the master side plugins on Unix: 

    mysql> UNINSTALL PLUGIN rpl_semi_sync_master;
mysql> INSTALL PLUGIN rpl_semi_sync_master SONAME 'semisync_master.so';

    If you do not uninstall the older version first, attempting to install the newer version results in an error: 

    mysql> INSTALL PLUGIN rpl_semi_sync_master SONAME 'semisync_master.so';
ERROR 1125 (HY000): Function 'rpl_semi_sync_master' already exists

    For the slave side, similar statements apply: 

    mysql> UNINSTALL PLUGIN rpl_semi_sync_slave;
mysql> INSTALL PLUGIN rpl_semi_sync_slave SONAME 'semisync_slave.so';