[IT-SecNots] [SECURITY] [DSA 3955-1] mariadb-10.1 security update

[Salvatore Bonaccorso <carnil AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3955-1                   security AT debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
August 26, 2017                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : mariadb-10.1
CVE ID         : CVE-2017-3636 CVE-2017-3641 CVE-2017-3653

Several issues have been discovered in the MariaDB database server. The
vulnerabilities are addressed by upgrading MariaDB to the new upstream
version 10.1.26. Please see the MariaDB 10.1 Release Notes for further
details:

 https://mariadb.com/kb/en/mariadb/mariadb-10124-release-notes/
 https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes/
 https://mariadb.com/kb/en/mariadb/mariadb-10126-release-notes/

For the stable distribution (stretch), these problems have been fixed in
version 10.1.26-0+deb9u1.

For the unstable distribution (sid), these problems have been fixed in
version 10.1.26-1.

We recommend that you upgrade your mariadb-10.1 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=H/hD
-----END PGP SIGNATURE-----