Hi, Christian! On Oct 25, Christian Rebischke wrote: > Hello, > Sorry for disturbing again. On your security page > https://mariadb.com/kb/en/mariadb/security/ are the following CVE's > missing: ... > I am not sure if mariadb is affected by them or not. Would be awesome > if you could add them at the right section :-)
Not affected, that's why they aren't listed. The security page lists all CVEs that affected MariaDB and the version when they were fixed. CVEs that never affected us are not listed. > CVE-2015-4910 It's for memcached plugin, we don't have it. > CVE-2015-4905 > CVE-2015-4904 > CVE-2015-4895 > CVE-2015-4862 > CVE-2015-4833 > CVE-2015-4800 > CVE-2015-4791 > CVE-2015-4766 They're all for MySQL-5.6, for the code that we don't have. MySQL-5.5 was the last version when we merged everything from MySQL. That is, MariaDB is based on MySQL-5.5 codebase, we only merge InnoDB and Performance Schema from 5.6. Regards, Sergei [email protected] _______________________________________________ Mailing list: https://launchpad.net/~maria-developers Post to : [email protected] Unsubscribe : https://launchpad.net/~maria-developers More help : https://help.launchpad.net/ListHelp
