From: Peter Korsgaard <peter@korsgaard.com>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH 1/1] package/mariadb: security bump to 10.3.23
Date: Fri, 29 May 2020 23:31:19 +0200 [thread overview]
Message-ID: <87pnaml97c.fsf@dell.be.48ers.dk> (raw)
In-Reply-To: <20200518140049.138333-1-bluemrp9@gmail.com> (Ryan Coe's message of "Mon, 18 May 2020 07:00:49 -0700")
>>>>> "Ryan" == Ryan Coe <bluemrp9@gmail.com> writes:
> Add two spaces in hash file.
> Remove patch 0002 as it has been applied upstream.
> Release notes:
> https://mariadb.com/kb/en/library/mariadb-10323-release-notes/
> Changelog:
> https://mariadb.com/kb/en/library/mariadb-10323-changelog/
> Fixes the following security vulnerabilities:
> CVE-2020-2752 - Vulnerability in the MySQL Client product of Oracle MySQL
> (component: C API). Supported versions that are affected are 5.6.47 and
> prior, 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit
> vulnerability allows low privileged attacker with network access via
> multiple protocols to compromise MySQL Client. Successful attacks of this
> vulnerability can result in unauthorized ability to cause a hang or
> frequently repeatable crash (complete DOS) of MySQL Client.
> CVE-2020-2812 - Vulnerability in the MySQL Server product of Oracle MySQL
> (component: Server: Stored Procedure). Supported versions that are affected
> are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily
> exploitable vulnerability allows high privileged attacker with network
> access via multiple protocols to compromise MySQL Server. Successful attacks
> of this vulnerability can result in unauthorized ability to cause a hang or
> frequently repeatable crash (complete DOS) of MySQL Server.
> CVE-2020-2814 - Vulnerability in the MySQL Server product of Oracle MySQL
> (component: InnoDB). Supported versions that are affected are 5.6.47 and
> prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable
> vulnerability allows high privileged attacker with network access via
> multiple protocols to compromise MySQL Server. Successful attacks of this
> vulnerability can result in unauthorized ability to cause a hang or
> frequently repeatable crash (complete DOS) of MySQL Server.
> CVE-2020-2760 - Vulnerability in the MySQL Server product of Oracle MySQL
> (component: InnoDB). Supported versions that are affected are 5.7.29 and
> prior and 8.0.19 and prior. Easily exploitable vulnerability allows high
> privileged attacker with network access via multiple protocols to compromise
> MySQL Server. Successful attacks of this vulnerability can result in
> unauthorized ability to cause a hang or frequently repeatable crash
> (complete DOS) of MySQL Server as well as unauthorized update, insert or
> delete access to some of MySQL Server accessible data.
> Signed-off-by: Ryan Coe <bluemrp9@gmail.com>
Committed to 2020.02.x, thanks.
--
Bye, Peter Korsgaard
prev parent reply other threads:[~2020-05-29 21:31 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-05-18 14:00 [Buildroot] [PATCH 1/1] package/mariadb: security bump to 10.3.23 Ryan Coe
2020-05-21 13:20 ` Thomas Petazzoni
2020-05-29 21:31 ` Peter Korsgaard [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87pnaml97c.fsf@dell.be.48ers.dk \
--to=peter@korsgaard.com \
--cc=buildroot@busybox.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.