Bug 462222 – <dev-db/mariadb-5.5.39: Geometry Query Processing Denial of Service Vulnerability (CVE-2013-1861)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2013-03-18 15:46:32 UTC]

From ${URL} :

Description
A vulnerability has been reported in MariaDB, which can be exploited by malicious users to cause a 
DoS (Denial of Service).

For more information:
SA52639

The vulnerability is reported in versions 5.1.67, 5.2.14, 5.3.12, and 5.5.29.


Solution
Update to version 5.5.30.

Provided and/or discovered by
Alyssa Milburn.

Original Advisory
https://mariadb.atlassian.net/browse/MDEV-4252

[Comment 1 Robin Johnson 2013-03-18 20:06:59 UTC]

5.5.30 is NOT actually fixed.
5.5.31 will have the complete fix.
See the other bug.

*** This bug has been marked as a duplicate of bug 460748 ***

[Comment 2 Agostino Sarubbo 2013-09-05 08:24:56 UTC]

(In reply to Robin Johnson from comment #1)
> *** This bug has been marked as a duplicate of bug 460748 ***

Not a duplicate. Since they are on a different severity, we can better track with separate bugs.


(In reply to Robin Johnson from comment #1)
> 5.5.30 is NOT actually fixed.
> 5.5.31 will have the complete fix.

What about 5.2.x and 5.3.x ?

[Comment 3 Kristian Fiskerstrand (RETIRED) 2014-08-05 21:44:01 UTC]

According to ${URL} this is fixed in 5.5.30, 5.3.13, 5.2.15, 5.1.73

5.5.39 is being stabilized in bug 518718

[Comment 4 Brian Evans (RETIRED) 2014-09-10 12:58:54 UTC]

Cleanup is done on mariadb.

No previous version was stable and old versions are masked in the tree pending removal.

[Comment 5 Kristian Fiskerstrand (RETIRED) 2014-09-10 16:21:59 UTC]

(In reply to Brian Evans from comment #4)
> Cleanup is done on mariadb.
> 
> No previous version was stable and old versions are masked in the tree
> pending removal.

Thanks. Closing this as noglsa