Stay Secure with the Latest Linux Advisories

security advisorycriticalsoftware update

Debian 9 DLA-2605-1 Critical: MariaDB Remote Execution Risk Advisory

A remote code execution issue was discovered in MariaDB. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2605-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Anton Gladky March 22, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : mariadb-10.1 Version : 10.1.48-0+deb9u2 CVE ID : CVE-2021-27928 A remote code execution issue was discovered in MariaDB. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. For Debian 9 stretch, this problem has been fixed in version 10.1.48-0+deb9u2. We recommend that you upgrade your mariadb-10.1 packages. For the detailed security status of mariadb-10.1 please refer to its security tracker page at: Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu Security Notice USN-5095-1 addresses a vulnerability in PostgreSQL. It is advisable to update to the latest version for protection.. MariaDB Security Update, Debian DLA-2605-1, Remote Code Execution Risk, OS Command Injection, Secure Database Practices. . Severity: Critical. LinuxSecurity.com Team

Mar 23, 2021 •Critical Debian LTS