[ GLSA 201411-02 ] MySQL, MariaDB: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: MySQL, MariaDB: Multiple vulnerabilities (GLSA 201411-02)
Severity: normal
Exploitable: remote
Date: November 05, 2014
Bug(s): #525504
ID: 201411-02

Synopsis

Multiple vulnerabilities have been found in the MySQL and MariaDB,
possibly allowing attackers to cause unspecified impact.


Background

MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an
enhanced, drop-in replacement for MySQL.


Affected Packages

Package: dev-db/mysql
Vulnerable: < 5.5.40
Unaffected: >= 5.5.40
Architectures: All supported architectures

Package: dev-db/mariadb
Vulnerable: < 5.5.40-r1
Unaffected: >= 5.5.40-r1
Architectures: All supported architectures


Description

Multiple unspecified vulnerabilities have been discovered in MySQL.
Please review the CVE identifiers referenced below for details.


Impact

A remote attacker could exploit these vulnerabilities to cause
unspecified impact, possibly including remote execution of arbitrary
code, Denial of Service, or disclosure of sensitive information.


Workaround

There is no known workaround at this time.

Resolution

All MySQL users should upgrade to the latest version: