An update for mariadb is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a newer upstream version:
mariadb (5.5.50).

Security Fix(es) :

* This update fixes several vulnerabilities in the MariaDB database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages, listed in the References section. (CVE-2016-0640, CVE-2016-0641, CVE-2016-0643, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0666, CVE-2016-3452, CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440, CVE-2016-5444)

The following packages have been upgraded to a newer upstream version:
mariadb (5.5.50).

Security Fix(es) :

(CVE-2016-0640, CVE-2016-0641, CVE-2016-0643, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0666, CVE-2016-3452, CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440, CVE-2016-5444)

This update for mariadb fixes the following issues :

  - CVE-2016-3477: Unspecified vulnerability in subcomponent     parser [bsc#991616]

  - CVE-2016-3521: Unspecified vulnerability in subcomponent     types [bsc#991616] 

  - CVE-2016-3615: Unspecified vulnerability in subcomponent     dml [bsc#991616] 

  - CVE-2016-5440: Unspecified vulnerability in subcomponent     rbr [bsc#991616]

  - mariadb failing test main.bootstrap [bsc#984858]

  - left over 'openSUSE' comments in MariaDB on SLE12 GM and     SP1 [bsc#985217]

  - remove unnecessary conditionals from specfile

  - add '--ignore-db-dir=lost+found' option to     rc.mysql-multi in order not to misinterpret the     lost+found directory as a database [bsc#986251]

This update was imported from the SUSE:SLE-12-SP1:Update update project.

This update for mariadb to 10.0.27 fixes the following issues :

  - release notes :

  - https://kb.askmonty.org/en/mariadb-10027-release-notes

  - https://kb.askmonty.org/en/mariadb-10026-release-notes

  - changelog :

  - https://kb.askmonty.org/en/mariadb-10027-changelog

  - https://kb.askmonty.org/en/mariadb-10026-changelog

  - fixed CVE's 10.0.27: CVE-2016-5612, CVE-2016-5630,     CVE-2016-6662 10.0.26: CVE-2016-5440, CVE-2016-3615,     CVE-2016-3521, CVE-2016-3477

  - fix: [boo#1005561], [boo#1005570], [boo#998309],     [boo#989926], [boo#989922], [boo#989919], [boo#989913]

  - requires devel packages for aio and lzo2

  - remove mariadb-10.0.21-mysql-test_main_bootstrap.patch     that is no longer needed [boo#984858] 

  - append '--ignore-db-dir=lost+found' to the mysqld     options in 'mysql-systemd-helper' script if 'lost+found'     directory is found in $datadir [boo#986251]

  - remove syslog.target from *.service files [boo#983938]

  - add systemd to deps to build on leap and friends 

  - replace '%(_libexecdir)/systemd/system' with %(_unitdir)     macro

  - remove useless mysql@default.service [boo#971456] 

  - make ORDER BY optimization functions take into account     multiple equalities [boo#949520]

  - adjust mysql-test results in order to take account of a     new option (orderby_uses_equalities) added by the     optimizer patch [boo#1003800]

  - replace all occurrences of the string '@sysconfdir@'     with '/etc' in     mysql-community-server-5.1.46-logrotate.patch as it     wasn't expanded properly [boo#990890]

ID	名稱	產品	系列	已發布	已更新	嚴重性
92950	CentOS 7 : mariadb (CESA-2016:1602)	Nessus	CentOS Local Security Checks	2016/8/15	2026/1/28	high
92996	Scientific Linux Security Update : mariadb on SL7.x x86_64 (20160811)	Nessus	Scientific Linux Local Security Checks	2016/8/17	2026/1/28	high
93431	openSUSE Security Update : mariadb (openSUSE-2016-1068)	Nessus	SuSE Local Security Checks	2016/9/12	2026/1/26	high
94649	openSUSE Security Update : mariadb (openSUSE-2016-1274)	Nessus	SuSE Local Security Checks	2016/11/9	2026/1/19	critical

偵測

搜尋 Plugin

high

high

high

critical