Summary: | <dev-db/mariadb-{10.2.38,10.3.29,10.4.19,10.5.10}: multiple vulnerabilities (CVE-2021-{2154,2166,2180}) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | GLSAMaker/CVETool Bot <glsamaker> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | hydrapolic, mysql-bugs |
Priority: | Normal | Flags: | nattka:
sanity-check-
|
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | B3 [glsa+ cve] | ||
Package list: |
dev-db/mariadb-10.2.38-r1
dev-db/mariadb-10.3.29-r1
dev-db/mariadb-10.4.19-r1
dev-db/mariadb-10.5.10-r1
sys-cluster/galera-26.4.8 amd64 ppc ppc64 x86
|
Runtime testing required: | --- |
Bug Depends on: | |||
Bug Blocks: | 789237 |
Description
GLSAMaker/CVETool Bot
2021-05-09 23:32:52 UTC
See tracker bug 789237. x86 stable This issue was resolved and addressed in GLSA 202105-28 at https://security.gentoo.org/glsa/202105-28 by GLSA coordinator Thomas Deutschmann (whissi). Re-opening for remaining architectures. 10.5.10 seems to work fine on my amd64. Is there any specific reason why a security fix has been marked as stable for x86 two weeks ago, and not yet for amd64? Also confirming that these work for me on amd64: dev-db/mariadb-10.2.38 dev-db/mariadb-10.3.29 dev-db/mariadb-10.4.19 dev-db/mariadb-10.5.10 amd64 done arm done arm64 done (In reply to Laszlo Valko from comment #6) > Is there any specific reason why a security fix has been marked as stable > for x86 two weeks ago, and not yet for amd64? Thanks for the pings (and others for letting us know it works too). The test suite for MariaDB needs manual intervention so it took some time for me to get to it as university has only just finished. (In reply to Sam James from comment #11) > (In reply to Laszlo Valko from comment #6) > > Is there any specific reason why a security fix has been marked as stable > > for x86 two weeks ago, and not yet for amd64? > > Thanks for the pings (and others for letting us know it works too). The test > suite for MariaDB needs manual intervention so it took some time for me to > get to it as university has only just finished. Thank you Sam. Unable to check for sanity:
> no match for package: dev-db/mariadb-10.2.38
ppc64 stable Unable to check for sanity:
> no match for package: dev-db/mariadb-10.2.38-r1
Last arch stabled, cleanup done, all done \o/ |