Bug 52729 - mariadb-10.1: Multiple issues (4.4)
mariadb-10.1: Multiple issues (4.4)
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Security updates
UCS 4.4
All Linux
: P3 normal (vote)
: UCS 4.4-7-errata
Assigned To: Quality Assurance
Erik Damrose
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2021-02-01 09:10 CET by Quality Assurance
Modified: 2021-02-03 15:04 CET (History)
0 users

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Quality Assurance univentionstaff 2021-02-01 09:10:41 CET
New Debian mariadb-10.1 10.1.48-0+deb9u1 fixes:
This update addresses the following issues:
* Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)
* Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)
Comment 1 Quality Assurance univentionstaff 2021-02-01 10:00:33 CET
--- mirror/ftp/4.4/unmaintained/4.4-7/source/mariadb-10.1_10.1.47-0+deb9u1.dsc
+++ apt/ucs_4.4-0-errata4.4-7/source/mariadb-10.1_10.1.48-0+deb9u1.dsc
@@ -1,3 +1,9 @@
+10.1.48-0+deb9u1 [Sun, 31 Jan 2021 18:38:36 +0200] Adrian Bunk <bunk@debian.org>:
+
+  * Non-maintainer upload by the LTS team.
+  * New upstream release, including fixes for
+    CVE-2020-14765 and CVE-2020-14812.
+
 10.1.47-0+deb9u1 [Mon, 12 Oct 2020 20:40:35 +0300] Otto Kekäläinen <otto@debian.org>:
 
   * SECURITY UPDATE: New upstream version 10.1.47. Includes fixes for the

<http://10.200.17.11/4.4-7/#7642076831701000158>
Comment 2 Erik Damrose univentionstaff 2021-02-02 23:55:06 CET
OK: yaml
OK: announce_errata
OK: patch
FAIL: piuparts
~~ After package purge, some files without owner remain below /var/lib/mysql/mysql/

-> verified

[4.4-7] 7cad241657 Bug #52729: mariadb-10.1 10.1.48-0+deb9u1
 doc/errata/staging/mariadb-10.1.yaml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)