Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 507978

Summary: <dev-db/mariadb-5.5.39: Multiple Vulnerabilities
Product: Gentoo Security Reporter: Agostino Sarubbo <ago>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED FIXED    
Severity: trivial CC: mysql-bugs
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://secunia.com/advisories/58106/
Whiteboard: ~2 [noglsa]
Package list:
Runtime testing required: ---
Bug Depends on: 490580    
Bug Blocks:    

Description Agostino Sarubbo gentoo-dev 2014-04-18 10:02:31 UTC
From ${URL} :

Description

Multiple vulnerabilities have been reported in MariaDB, which can be exploited by malicious users to cause 
a DoS (Denial of Service) and compromise a vulnerable system and by malicious people to disclose sensitive 
information, manipulate certain data, and cause a DoS.

For more information:
SA57940 (#2, #3, #8, #9, #10, #12, #13, #14)

The vulnerabilities are reported in versions prior to 5.5.37.


Solution:
Update to version 5.5.37.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
https://mariadb.com/kb/en/mariadb-5537-release-notes/
https://mariadb.com/kb/en/mariadb-5537-changelog/


@maintainer(s): since the package has never been marked as stable, we don't need to stabilize it. After the bump, please remove the affected versions from the tree.
Comment 1 Jorge Manuel B. S. Vicetto (RETIRED) Gentoo Infrastructure gentoo-dev 2014-04-24 23:59:35 UTC
mariadb-5.5.32 dropped from the tree.
Comment 2 Kristian Fiskerstrand (RETIRED) gentoo-dev 2014-09-10 21:01:51 UTC
Closing noglsa. 5.5.39 in tree and older versions removed or p.masked for removal.