Skip to content
OpenAdvisories
Medium ELSA-2014-0702 8 CVEs

Moderate: mariadb security update (Oracle Linux 7)

Published Jul 23, 2014 · Updated Jul 23, 2014

Ecosystem: Oracle Linux

Summary

[1:5.5.37-1]
- Rebase to 5.5.37
https://kb.askmonty.org/en/mariadb-5537-changelog/
Also fixes: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432 CVE-2014-2431
CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
Resolves: #1101062

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 mariadb 1:5.5.37-1.el7_0
Oracle Linux · 7 mariadb-bench 1:5.5.37-1.el7_0
Oracle Linux · 7 mariadb-devel 1:5.5.37-1.el7_0
Oracle Linux · 7 mariadb-embedded 1:5.5.37-1.el7_0
Oracle Linux · 7 mariadb-embedded-devel 1:5.5.37-1.el7_0
Oracle Linux · 7 mariadb-libs 1:5.5.37-1.el7_0
Oracle Linux · 7 mariadb-server 1:5.5.37-1.el7_0
Oracle Linux · 7 mariadb-test 1:5.5.37-1.el7_0

Vulnerabilities 8

  • Unscored —
    CVE-2014-0384

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allow…

    mysql-5.5 Ubuntu
  • Unscored —
    CVE-2014-2419

    Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated …

    mysql-5.5 Ubuntu
  • Unscored —
    CVE-2014-2430

    Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated …

    mysql-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-2431

    Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to a…

    mysql-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-2432

    Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote aut…

    mysql-5.5 Ubuntu
  • Unscored —
    CVE-2014-2436

    Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated …

    mysql-5.5 mysql-5.6 Ubuntu
  • Unscored —
    CVE-2014-2438

    Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated …

    mysql-5.5 Ubuntu
  • Unscored —
    CVE-2014-2440

    Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allow…

    mysql-5.5 mysql-5.6 Ubuntu