Register | Log in

mariadb-10.0

Choose email to subscribe with

general

source: mariadb-10.0 (updates)
version: 10.0.35-0+deb8u1
maintainer: Debian MySQL Maintainers (archive) [DMD]
uploaders: Otto Kekäläinen [DMD] – Ondřej Surý [DMD]
arch: all any
std-ver: 3.9.6
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 10.0.32-0+deb8u1
old-sec: 10.0.35-0+deb8u1

versioned links

10.0.25-0+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
10.0.30-0+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
10.0.32-0+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
10.0.35-0+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libmariadbd-dev
mariadb-client
mariadb-client-10.0
mariadb-client-core-10.0
mariadb-common
mariadb-connect-engine-10.0
mariadb-oqgraph-engine-10.0
mariadb-server
mariadb-server-10.0
mariadb-server-core-10.0
mariadb-test
mariadb-test-10.0

package is gone

This package is not in any development repository. This probably means that the package has been removed (or has been renamed). Thus the information here is of little interest ... the package is going to disappear unless someone takes it over and reintroduces it.

action needed

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.2.0 instead of 3.9.6).

Created: 2017-03-15 Last update: 2018-08-20 17:21

5 security issues in jessie high

There are 5 open security issues in jessie.

5 important issues:

CVE-2018-3058: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
CVE-2017-15365: sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking.
CVE-2018-3064: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).
CVE-2018-3063: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVE-2018-3066: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N).

Please fix them.

Created: 2017-10-29 Last update: 2018-08-08 20:07

news

[2018-06-29] Accepted mariadb-10.0 10.0.35-0+deb8u1 (source amd64 all) into oldstable (Emilio Pozuelo Monfort)
[2018-06-17] Accepted mariadb-10.0 10.0.32-0+deb8u1 (source amd64 all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Ondřej Surý)
[2017-04-30] Accepted mariadb-10.0 10.0.30-0+deb8u2 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Ondřej Surý)
[2017-04-30] Accepted mariadb-10.0 10.0.30-0+deb8u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Otto Kekäläinen)
[2017-04-30] Accepted mariadb-10.0 10.0.29-0+deb8u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Otto Kekäläinen)
[2017-04-30] Accepted mariadb-10.0 10.0.28-0+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2017-03-10] Removed 10.0.28-3 from unstable (Debian FTP Masters)
[2017-03-10] Removed 10.0.28-2 from unstable (Debian FTP Masters)
[2017-03-10] Removed 10.0.28-3 from unstable (Debian FTP Masters)
[2017-03-10] Removed 10.0.28-2 from unstable (Debian FTP Masters)
[2017-01-24] mariadb-10.0 REMOVED from testing (Debian testing watch)
[2016-12-21] Accepted mariadb-10.0 10.0.28-3 (source) into unstable (Otto Kekäläinen)
[2016-11-22] mariadb-10.0 10.0.28-2 MIGRATED to testing (Debian testing watch)
[2016-11-11] Accepted mariadb-10.0 10.0.28-2 (source amd64 all) into unstable (Otto Kekäläinen)
[2016-11-09] mariadb-10.0 10.0.28-1 MIGRATED to testing (Debian testing watch)
[2016-10-29] Accepted mariadb-10.0 10.0.28-1 (source amd64 all) into unstable (Otto Kekäläinen)
[2016-10-13] mariadb-10.0 10.0.27-2 MIGRATED to testing (Debian testing watch)
[2016-10-02] Accepted mariadb-10.0 10.0.27-2 (source amd64 all) into unstable (Otto Kekäläinen)
[2016-09-18] mariadb-10.0 10.0.27-1 MIGRATED to testing (Debian testing watch)
[2016-09-17] mariadb-10.0 10.0.27-0+deb8u1 MIGRATED to testing (Debian testing watch)
[2016-09-10] Accepted mariadb-10.0 10.0.27-0+deb8u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (Otto Kekäläinen)
[2016-09-10] Accepted mariadb-10.0 10.0.26-0+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2016-09-08] Accepted mariadb-10.0 10.0.27-1 (source amd64 all) into unstable (Otto Kekäläinen)
[2016-08-20] mariadb-10.0 10.0.26-3 MIGRATED to testing (Debian testing watch)
[2016-08-17] Accepted mariadb-10.0 10.0.26-3 (source) into unstable (Otto Kekäläinen)
[2016-07-29] Accepted mariadb-10.0 10.0.26-2 (source i386 all) into unstable (Otto Kekäläinen)
[2016-07-21] Accepted mariadb-10.0 10.0.26-2~exp3 (source amd64 all) into experimental (Otto Kekäläinen)
[2016-07-09] Accepted mariadb-10.0 10.0.26-2~exp2 (source amd64 all) into experimental, experimental (Otto Kekäläinen)
[2016-06-28] Accepted mariadb-10.0 10.0.26-1 (source amd64 all) into unstable, unstable (Otto Kekäläinen)
[2016-06-14] mariadb-10.0 10.0.25-1 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 6
RC: 4
I&N: 2
M&W: 0
F&P: 0
patch: 0

links

homepage
buildd: logs, clang
popcon
browse source code
edit tags
security tracker

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing