Multiple vulnerabilities have been discovered in MariaDB, the worst fo which can lead to arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.11.3:10.6, < 10.11.3:10.11, < 10.6.0 | >= 10.6.13:10.6, >= 10.11.3:10.11 |
MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MariaDB. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All MariaDB 10.6 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.11.3:10.6"
All MariaDB 10.11 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.11.3:10.11"
Multiple vulnerabilities have been found in MariaDB, the worst of which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.5.10 | >= 10.2.38:10.2, >= 10.3.29:10.3, >= 10.4.19:10.4, >= 10.5.10:10.5 |
MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MariaDB. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All MariaDB 10.2.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.2.38:10.2"
All MariaDB 10.3.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.3.29:10.3"
All MariaDB 10.3.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.4.19:10.4"
All MariaDB 10.5.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.5.10:10.5"
Multiple vulnerabilities have been found in MariaDB, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.5.8 | >= 10.2.36:10.2, >= 10.3.27:10.3, >= 10.4.17:10.4, >= 10.5.8:10.5 |
MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MariaDB. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All MariaDB 10.2.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.2.36:10.2"
All MariaDB 10.3.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.3.27:10.3"
All MariaDB 10.4.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.4.17:10.4"
All MariaDB 10.5.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.5.8:10.5"
A vulnerability has been discovered in MariaDB which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.5.6 | >= 10.5.6:10.5, >= 10.4.13-r3:10.4, >= 10.3.23-r3:10.3, >= 10.2.22-r3:10.2 |
MariaDB is an enhanced, drop-in replacement for MySQL.
It was discovered that MariaDB did not properly validate the content of a packet received from a server.
A remote attacker could send a specially crafted packet to WSREP service, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All MariaDB 10.5.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.5.6:10.5"
All MariaDB 10.4.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.4.13-r3:10.4"
All MariaDB 10.3.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.3.23-r3:10.3"
All MariaDB 10.2.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.2.22-r3:10.2"
Multiple vulnerabilities have been found in MariaDB and MySQL, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.1.38-r1, < 10.2.22 | >= 10.1.38-r1, >= 10.2.22 |
| dev-db/mysql | * | < 5.6.42, < 5.7.24 | >= 5.6.42, >= 5.7.24 |
MariaDB is an enhanced, drop-in replacement for MySQL. MySQL is a popular multi-threaded, multi-user SQL server. MySQL is a popular multi-threaded, multi-user SQL server
Multiple vulnerabilities have been discovered in MariaDB and MySQL. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All MariaDB 10.1.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.1.38-r1"
All MariaDB 10.2.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.2.22"
All MySQL 5.6.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.42"
All MySQL 5.7.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.7.24"
A vulnerability was discovered in MariaDB and MySQL which may allow local users to gain root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.0.30-r1 | >= 10.0.30-r1 |
| dev-db/mysql | * | < 5.6.36-r1 | >= 5.6.36-r1 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
The Gentoo installation scripts before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.
A local attacker could escalate privileges to root.
There is no known workaround at this time.
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.0.30-r1"
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.36-r1"
Multiple vulnerabilities have been found in MariaDB, the worst of which could lead to privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.0.29 | >= 10.0.29 |
MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MariaDB. Please review the CVE identifiers referenced below for details.
An attacker could possibly escalate privileges, gain access to critical data or complete access to all MariaDB Server accessible data, or cause a Denial of Service condition via unspecified vectors.
There is no known workaround at this time.
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.0.29"
Multiple vulnerabilities have been found in MariaDB and MySQL, the worst of which could lead to the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.0.28 | >= 10.0.28 |
| dev-db/mysql | * | < 5.6.34 | >= 5.6.34 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MariaDB and MySQL. Please review the CVE identifiers referenced below for details.
Attackers could execute arbitrary code, escalate privileges, and impact availability via unspecified vectors.
There is no known workaround at this time.
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.0.28"
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.34"
Multiple vulnerabilities have been found in MySQL and MariaDB, the worst of which could allow remote attackers to cause a Denial of Service condition or obtain sensitive information.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariab | * | — | >= 10.0.27 |
| dev-db/mariadb | * | < 10.0.27 | > 5.5.51 (revision) |
| dev-db/mysql | * | < 5.6.31 | >= 5.6.31 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MySQL and MariaDB. Please review the CVE identifiers referenced below for details.
A remote attacker could exploit vulnerabilities, through multiple vectors, that affect the confidentiality, integrity, and availability of MySQL and MariaDB.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.31"
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.0.27"
Multiple vulnerabilities have been found in MySQL and MariaDB, the worst of which can allow remote attackers to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.0.16 | >= 10.0.16, >= 5.5.49 (revision) |
| dev-db/mysql | * | < 5.6.22 | >= 5.6.22 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MySQL and MariaDB. Please review the CVE identifiers referenced below for details.
A remote attacker could exploit vulnerabilities to possibly cause a Denial of Service condition.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.22"
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.0.16"
Multiple vulnerabilities have been found in the MySQL and MariaDB, possibly allowing attackers to cause unspecified impact.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 5.5.40-r1 | >= 5.5.40-r1 |
| dev-db/mysql | * | < 5.5.40 | >= 5.5.40 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple unspecified vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details.
A remote attacker could exploit these vulnerabilities to cause unspecified impact, possibly including remote execution of arbitrary code, Denial of Service, or disclosure of sensitive information.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.5.40"
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-5.5.40-r1"