[ GLSA 201908-24 ] MariaDB, MySQL

[GLSA]

Gentoo Linux Security Advisory

Title: MariaDB, MySQL: Multiple vulnerabilities (GLSA 201908-24)
Severity: normal
Exploitable: local, remote
Date: 2019-08-18
Bug(s): #661500, #670388, #679024
ID: 201908-24

Synopsis

Multiple vulnerabilities have been found in MariaDB and MySQL, the
worst of which could result in privilege escalation.


Background

MariaDB is an enhanced, drop-in replacement for MySQL. MySQL is a
popular multi-threaded, multi-user SQL server. MySQL is a popular
multi-threaded, multi-user SQL server


Affected Packages

Package: dev-db/mariadb
Vulnerable: < 10.1.38-r1
Vulnerable: < 10.2.22
Unaffected: >= 10.1.38-r1
Unaffected: >= 10.2.22
Architectures: All supported architectures

Package: dev-db/mysql
Vulnerable: < 5.6.42
Vulnerable: < 5.7.24
Unaffected: >= 5.6.42
Unaffected: >= 5.7.24
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in MariaDB and MySQL.
Please review the CVE identifiers referenced below for details.


Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All MariaDB 10.1.x users should upgrade to the latest version: