Lucene search

K
mageiaGentoo FoundationMGASA-2014-0377
HistorySep 15, 2014 - 2:36 p.m.

Updated mariadb packages fix CVE-2014-4274

2014-09-1514:36:30
Gentoo Foundation
advisories.mageia.org
12

4.1 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

24.7%

Updated mariadb packages fix security vulnerability: MyISAM temporary files could be used to mount a code-execution attack (CVE-2014-4274). The mariadb package has been updated to version 5.5.39, which fixes this and several other issues. Refer to the upstream Changelog for more details.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchmariadb< 5.5.39-1mariadb-5.5.39-1.mga3
Mageia4noarchmariadb< 5.5.39-1mariadb-5.5.39-1.mga4

4.1 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

24.7%