Author: nluedtke-guest
Date: 2017-03-10 16:23:24 +0000 (Fri, 10 Mar 2017)
New Revision: 49565
Modified:
data/CVE/list
Log:
Update CVE-2016-5483 for MariaDB
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-03-10 14:19:13 UTC (rev 49564)
+++ data/CVE/list 2017-03-10 16:23:24 UTC (rev 49565)
@@ -30444,15 +30444,18 @@
RESERVED
CVE-2016-5483
RESERVED
- - mariadb-10.1 <undetermined>
- - mariadb-10.0 <unfixed>
- [jessie] - mariadb-10.0 <no-dsa> (Minor issue)
+ - mariadb-10.1 10.1.20-1
+ - mariadb-10.0 10.0.28-1
+ [jessie] - mariadb-10.0 10.0.28-0+deb8u1
- mysql-5.7 <unfixed>
- mysql-5.5 <removed>
[jessie] - mysql-5.5 <no-dsa> (Minor issue)
NOTE: https://blog.tarq.io/cve-2016-5483-backdooring-mysqldump-backups/
NOTE: Affected according to blogpost: MySQL all versions, MariaDB <=
5.5.52 and < 10.1
- TODO: check fixing commit for MariaDB
+ NOTE: Per MariaDB Security fixed with the following three commits:
+ NOTE:
https://github.com/MariaDB/server/commit/5a43a31ee81bc181eeb5ef2bf0704befa6e0594d
+ NOTE:
https://github.com/MariaDB/server/commit/01b39b7b0730102b88d8ea43ec719a75e9316a1e
+ NOTE:
https://github.com/MariaDB/server/commit/383007c75d6ef5043fa5781956a6a02b24e2b79e
CVE-2016-5482 (Unspecified vulnerability in the Oracle Commerce Guided Search
...)
NOT-FOR-US: Oracle
CVE-2016-5481 (Unspecified vulnerability in the Sun ZFS Storage Appliance Kit
(AK) ...)
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
