Lucene search

K
slackwareSlackware Linux ProjectSSA-2017-251-02
HistorySep 08, 2017 - 6:06 p.m.

[slackware-security] mariadb

2017-09-0818:06:32
Slackware Linux Project
www.slackware.com
16

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

50.6%

New mariadb packages are available for Slackware 14.1 and 14.2 to
fix security issues.

Here are the details from the Slackware 14.2 ChangeLog:

patches/packages/mariadb-10.0.32-i586-1_slack14.2.txz: Upgraded.
This update fixes bugs and security issues.
For more information, see:
https://vulners.com/cve/CVE-2017-3636
https://vulners.com/cve/CVE-2017-3641
https://vulners.com/cve/CVE-2017-3653
(* Security fix *)

Where to find the new packages:

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)

Also see the “Get Slack” section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/mariadb-5.5.57-i486-1_slack14.1.txz

Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/mariadb-5.5.57-x86_64-1_slack14.1.txz

Updated package for Slackware 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/mariadb-10.0.32-i586-1_slack14.2.txz

Updated package for Slackware x86_64 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/mariadb-10.0.32-x86_64-1_slack14.2.txz

MD5 signatures:

Slackware 14.1 package:
e18d20ce245d96764c1385e7cd48e9d5 mariadb-5.5.57-i486-1_slack14.1.txz

Slackware x86_64 14.1 package:
270fbdbb08f125c2056ee3fddc3ae9f9 mariadb-5.5.57-x86_64-1_slack14.1.txz

Slackware 14.2 package:
9152299e6b3eede1f4fe2c357b8b43c6 mariadb-10.0.32-i586-1_slack14.2.txz

Slackware x86_64 14.2 package:
b39204d2de2aacba8cc3923b0f748d98 mariadb-10.0.32-x86_64-1_slack14.2.txz

Installation instructions:

Upgrade the package as root:
> upgradepkg mariadb-10.0.32-i586-1_slack14.2.txz

Then, restart the database server:
> sh /etc/rc.d/rc.mysqld restart

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

50.6%