Security
Security
Multiple vulnerabilities have been found in MariaDB and MySQL, the worst of which could result in privilege escalation.
| Package | dev-db/mariadb on all architectures |
|---|---|
| Affected versions | < 10.1.38-r1 < 10.2.22 |
| Unaffected versions | >= 10.1.38-r1 >= 10.2.22 |
| Package | dev-db/mysql on all architectures |
|---|---|
| Affected versions | < 5.6.42 < 5.7.24 |
| Unaffected versions | >= 5.6.42 >= 5.7.24 |
MariaDB is an enhanced, drop-in replacement for MySQL. MySQL is a popular multi-threaded, multi-user SQL server. MySQL is a popular multi-threaded, multi-user SQL server
Multiple vulnerabilities have been discovered in MariaDB and MySQL. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All MariaDB 10.1.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.1.38-r1"
All MariaDB 10.2.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.2.22"
All MySQL 5.6.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.42"
All MySQL 5.7.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.7.24"