openSUSE: Security Advisory for mariadb (openSUSE-SU-2018:1800-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2018:1781-1 Security update for mariadb

MariaDB was updated to 10.0.35 bsc1090518 Notable changes: PCRE updated to 8.42 XtraDB updated to 5.6.39-83.1 TokuDB updated to 5.6.39-83.1 InnoDB updated to 5.6.40 The embedded server library now supports SSL when connecting to remote servers bsc1088681, CVE-2018-2767 MDEV-15249 - Crash in MVCC...

SUSE-SU-2018:1771-1 Security update for mariadb, mariadb-connector-c, xtrabackup

This MariaDB update to version 10.2.15 brings the following fixes and improvements. Security issues: - CVE-2018-2767: The embedded server library now supports SSL when connecting to remote servers bsc1088681. - Collected CVEs fixes: 10.2.15: CVE-2018-2786, CVE-2018-2759, CVE-2018-2777,...

[SECURITY] Fedora 28 Update: mariadb-10.2.15-2.fc28

MariaDB is a community developed branch of MySQL. MariaDB is a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client...

Fedora Update for mariadb FEDORA-2018-2513b888a4

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Vulnerabilities in MariaDB affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in MariaDB. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-3600 DESCRIPTION: An unspecified vulnerability in Oracle MySQL related to the Server Client mysqldump component could allow an authenticated attacker to...

Security Bulletin: Vulnerabilities in mariadb affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Oracle MySQL Server mariadb. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-3492 DESCRIPTION: An unspecified vulnerability in Oracle MySQL Server related to the Server: Optimizer component could allow a remote...

Security Bulletin: Multiple vulnerabilities in mariadb affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in mariadb. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2016-0640 DESCRIPTION: An unspecified vulnerability in Oracle MySQL Server related to the Server: DML component has no confidentiality impact, partial integrit...

Security Bulletin:  IBM Security Guardium is affected by Open Source Oracle MySQL Vulnerabilities (CVE-2016-6662)

Summary MySQL Server could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper restrictions to logging functions. By executing a specially crafted series of SQL statements, an attacker could exploit this vulnerability to create or modify my.conf...

Security Bulletin: OpenSource Oracle MySQL Vulnerability affects IBM Security Guardium (CVE-2016-2047)

Summary Oracle MySQL, MariaDB and Percona Server could allow a remote attacker to bypass security restrictions. IBM Security Guardium has addressed the applicable CVE Vulnerability Details CVEID: CVE-2016-2047 DESCRIPTION: Oracle MySQL, MariaDB and Percona Server could allow a remote attacker to...

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Fedora 27 : qt3 (2018-0a0da2f3b7)

This update fixes CVE-2016-10040, a stack overflow in QXmlSimpleReader due to a too lenient entityCharacterLimit in our version of the patch for CVE-2013-4549. The limit was increased from the upstream 1024 to 65536 to address QTBUG-35459, an issue where the security fix was breaking existing...

Security update for mariadb (moderate)

This update for mariadb to version 10.2.15 fixes the following issues: These security issues were fixed: - CVE-2018-2767: Enforse use of SSL/TLS in embedded server library Return of BACKRONYM bsc1088681. - CVE-2018-2786: Vulnerability in the MySQL Server component of Oracle MySQL subcomponent:...

openSUSE Security Update : mariadb (openSUSE-2018-572)

This update for mariadb to version 10.2.15 fixes the following issues : These security issues were fixed : - CVE-2018-2767: Enforse use of SSL/TLS in embedded server library Return of BACKRONYM bsc1088681. - CVE-2018-2786: Vulnerability in the MySQL Server component of Oracle MySQL subcomponent:...

Malicious Typo-Squatting

mariadb is a malicious typo-squatted package. The package uses a similar name to another library so that developers may mistake it for a legitimate package but executes malicious actions under the hood such as stealing environment variables on installation...

CVE-2017-16046

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16046

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

Code injection

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16046

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2017-16046

CVE-2017-16046 corresponds to a malware incident involving the npm package name mariadb, which hijacked environment variables. The malware was published as a malicious module and all versions were unpublished from npm. Several connected sources indicate the issue affected the mariadb package and ...