Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-12043

CVE-2017-3313

Details

    Description

      Hello,

      a CVE-2017-3313 were revealed and solved by the Oracle in the MySQL project, however it was not delivered with the MariaDB 10.1.21 version (or mentioned in release notes)

      Attachments

        Activity

          Ascending order - Click to sort in descending order
          serg Sergei Golubchik added a comment -

          Unfortunately, the security researcher decided to inform us about this vulnerability only after we've released 5.5.54, so we couldn't have fixed it there. Also, MySQL "solution" changes the existing behavior and does not fix the vulnerability anyway, that's why we didn't merge it. We already have a fix for this issue, it'll be part of 5.5.55, 10.0.30, 10.1.22

          serg Sergei Golubchik added a comment - Unfortunately, the security researcher decided to inform us about this vulnerability only after we've released 5.5.54, so we couldn't have fixed it there. Also, MySQL "solution" changes the existing behavior and does not fix the vulnerability anyway, that's why we didn't merge it. We already have a fix for this issue, it'll be part of 5.5.55, 10.0.30, 10.1.22
          mschorm Michal Schorm added a comment -

          Thanks for the info.

          I filed this bug mostly to make sure both you and me won't overlooked it.

          mschorm Michal Schorm added a comment - Thanks for the info. I filed this bug mostly to make sure both you and me won't overlooked it.

          People

            serg Sergei Golubchik
            mschorm Michal Schorm
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.