[IT-SecNots] [SECURITY] [DSA 3770-1] mariadb-10.0 security update

[Salvatore Bonaccorso <carnil AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3770-1                   security AT debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
January 22, 2017                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : mariadb-10.0
CVE ID         : CVE-2016-6664 CVE-2017-3238 CVE-2017-3243 CVE-2017-3244
                 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3291
                 CVE-2017-3312 CVE-2017-3317 CVE-2017-3318
Debian Bug     : 842895 851755

Several issues have been discovered in the MariaDB database server. The
vulnerabilities are addressed by upgrading MariaDB to the new upstream
version 10.0.29. Please see the MariaDB 10.0 Release Notes for further
details:

 https://mariadb.com/kb/en/mariadb/mariadb-10029-release-notes/

For the stable distribution (jessie), these problems have been fixed in
version 10.0.29-0+deb8u1.

We recommend that you upgrade your mariadb-10.0 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=Cq4E
-----END PGP SIGNATURE-----