Skip to content
OpenAdvisories
Medium ELSA-2017-2192 21 CVEs

Moderate: mariadb security and bug fix update (Oracle Linux 7)

Published Aug 7, 2017 · Updated Aug 7, 2017

Ecosystem: Oracle Linux

Summary

[1:5.5.56-2]
- Do not fix context and change owner if run by root in mariadb-prepare-db-dir
Related: #1458940
- Check properly that datadir includes only expected files
Related: #1356897

[1:5.5.56-1]
- Rebase to 5.5.56
That release also fixes the following security issues:
CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238 CVE-2017-3243
CVE-2017-3244 CVE-2017-3258 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318
CVE-2017-3291 CVE-2017-3302 CVE-2016-5483/CVE-2017-3600 CVE-2017-3308
CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464
Resolves: #1458933
New deps required by upstream: checkpolicy and policycoreutils-python
License text removed by upstream: COPYING.LESSER
Do not ignore test-suite failure
Downstream script mariadb-prepare-db-dir fixed for CVE-2017-3265
Resolves: #1458940

[5.5.52-2]
- Extension of mariadb-prepare-db-dir script
- Resolves: #1356897

- Rebase to 5.5.52, that also include fix for CVE-2016-6662
Resolves: #1377974

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 mariadb 1:5.5.56-2.el7
Oracle Linux · 7 mariadb-bench 1:5.5.56-2.el7
Oracle Linux · 7 mariadb-devel 1:5.5.56-2.el7
Oracle Linux · 7 mariadb-embedded 1:5.5.56-2.el7
Oracle Linux · 7 mariadb-embedded-devel 1:5.5.56-2.el7
Oracle Linux · 7 mariadb-libs 1:5.5.56-2.el7
Oracle Linux · 7 mariadb-server 1:5.5.56-2.el7
Oracle Linux · 7 mariadb-test 1:5.5.56-2.el7

Vulnerabilities 21