[Git][security-tracker-team/security-tracker][master] Add new mariadb issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8dc032e7 by Salvatore Bonaccorso at 2018-11-04T15:05:16Z
Add new mariadb issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -42551,9 +42551,12 @@ CVE-2018-3283 (Vulnerability in the MySQL Server component of Oracle MySQL ...)
 	- mysql-5.5 <not-affected> (Only affects MySQL 5.7 and MySQL 8)
 	NOTE: https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixMSQL
 CVE-2018-3282 (Vulnerability in the MySQL Server component of Oracle MySQL ...)
+	- mariadb-10.1 <unfixed>
+	- mariadb-10.0 <removed>
 	- mysql-5.7 5.7.24-1 (bug #911221)
 	- mysql-5.5 <removed>
 	NOTE: https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixMSQL
+	NOTE: Fixed in MariaDB: 10.1.37, 10.0.37
 CVE-2018-3281 (Vulnerability in the Primavera P6 Enterprise Project Portfolio ...)
 	NOT-FOR-US: Oracle
 CVE-2018-3280 (Vulnerability in the MySQL Server component of Oracle MySQL ...)
@@ -42627,9 +42630,12 @@ CVE-2018-3253 (Vulnerability in the Oracle Virtual Directory component of Oracle
 CVE-2018-3252 (Vulnerability in the Oracle WebLogic Server component of Oracle Fusion ...)
 	NOT-FOR-US: Oracle
 CVE-2018-3251 (Vulnerability in the MySQL Server component of Oracle MySQL ...)
+	- mariadb-10.1 <unfixed>
+	- mariadb-10.0 <removed>
 	- mysql-5.7 5.7.24-1 (bug #911221)
 	- mysql-5.5 <not-affected> (Only affects MySQL 5.6, MySQL 5.7 and MySQL 8)
 	NOTE: https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixMSQL
+	NOTE: Fixed in MariaDB 10.1.37, 10.0.37
 CVE-2018-3250 (Vulnerability in the Oracle WebLogic Server component of Oracle Fusion ...)
 	NOT-FOR-US: Oracle
 CVE-2018-3249 (Vulnerability in the Oracle WebLogic Server component of Oracle Fusion ...)
@@ -42810,9 +42816,12 @@ CVE-2018-3176 (Vulnerability in the Hyperion Common Events component of Oracle .
 CVE-2018-3175 (Vulnerability in the Hyperion Common Events component of Oracle ...)
 	NOT-FOR-US: Oracle
 CVE-2018-3174 (Vulnerability in the MySQL Server component of Oracle MySQL ...)
+	- mariadb-10.1 <unfixed>
+	- mariadb-10.0 <removed>
 	- mysql-5.7 5.7.24-1 (bug #911221)
 	- mysql-5.5 <removed>
 	NOTE: https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixMSQL
+	NOTE: Fixed in MariaDB 10.1.37, 10.0.37
 CVE-2018-3173 (Vulnerability in the MySQL Server component of Oracle MySQL ...)
 	- mysql-5.7 5.7.24-1 (bug #911221)
 	- mysql-5.5 <not-affected> (Only affects MySQL 5.7 and MySQL 8)
@@ -42862,9 +42871,12 @@ CVE-2018-3158 (Vulnerability in the Oracle Hospitality Cruise Fleet Management .
 CVE-2018-3157 (Vulnerability in the Java SE component of Oracle Java SE ...)
 	- openjdk-11 11.0.1+13-1
 CVE-2018-3156 (Vulnerability in the MySQL Server component of Oracle MySQL ...)
+	- mariadb-10.1 <unfixed>
+	- mariadb-10.0 <removed>
 	- mysql-5.7 5.7.24-1 (bug #911221)
 	- mysql-5.5 <not-affected> (Only affects MySQL 5.6, MySQL 5.7 and MySQL 8)
 	NOTE: https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixMSQL
+	NOTE: Fixed in MariaDB 10.1.37, 10.0.37
 CVE-2018-3155 (Vulnerability in the MySQL Server component of Oracle MySQL ...)
 	- mysql-5.7 5.7.24-1 (bug #911221)
 	- mysql-5.5 <not-affected> (Only affects MySQL 5.7 and MySQL 8)
@@ -42901,9 +42913,12 @@ CVE-2018-3144 (Vulnerability in the MySQL Server component of Oracle MySQL ...)
 	- mysql-5.5 <not-affected> (Only affects MySQL 5.7 and MySQL 8)
 	NOTE: https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixMSQL
 CVE-2018-3143 (Vulnerability in the MySQL Server component of Oracle MySQL ...)
+	- mariadb-10.1 <unfixed>
+	- mariadb-10.0 <removed>
 	- mysql-5.7 5.7.24-1 (bug #911221)
 	- mysql-5.5 <not-affected> (Only affects MySQL 5.6, MySQL 5.7 and MySQL 8)
 	NOTE: https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixMSQL
+	NOTE: Fixed in MariaDB 10.1.37, 10.0.37
 CVE-2018-3142 (Vulnerability in the Hyperion Essbase Administration Services ...)
 	NOT-FOR-US: Oracle
 CVE-2018-3141 (Vulnerability in the Hyperion Essbase Administration Services ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8dc032e7ec12ebd0b49a35e42658e79bbe71433c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8dc032e7ec12ebd0b49a35e42658e79bbe71433c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181104/c2b7c9d6/attachment.html>