Updated mariadb packages fix security vulnerabilities:
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
MyISAM). Easily exploitable vulnerability allows low privileged attacker
with network access via multiple protocols to compromise MariaDB Server.
Successful attacks of this vulnerability can result in unauthorized
update, insert or delete access to some of MariaDB Server accessible
data (CVE-2018-3058).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: Security: Privileges). Easily exploitable vulnerability allows
high privileged attacker with network access via multiple protocols to
compromise MariaDB Server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) of MariaDB Server (CVE-2018-3063).
Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
InnoDB). Easily exploitable vulnerability allows low privileged attacker
with n...
- https://bugs.mageia.org/show_bug.cgi?id=23407
- https://mariadb.com/docs/release-notes/community-server/old-releases/release-notes-mariadb-10-0-series/mariadb-10036-release-notes
- https://mariadb.org/mariadb-10-0-36-now-available/
- https://www.oracle.com/security-alerts/cpujul2018.html
- https://www.cve.org/CVERecord?id=CVE-2018-3058
- https://www.cve.org/CVERecord?id=CVE-2018-3063
- https://www.cve.org/CVERecord?id=CVE-2018-3065
- https://www.cve.org/CVERecord?id=CVE-2018-3066
- 5/core/mariadb-10.0.36-1.mga5
Get the latest Linux and open source security news straight to your inbox.