[ GLSA 201504-05 ] MySQL and MariaDB

[GLSA]

Gentoo Linux Security Advisory

Title: MySQL and MariaDB: Multiple vulnerabilities (GLSA 201504-05)
Severity: normal
Exploitable: remote
Date: April 11, 2015
Bug(s): #537216, #537262
ID: 201504-05

Synopsis

Multiple vulnerabilities have been found in MySQL and MariaDB, the
worst of which can allow remote attackers to cause a Denial of Service
condition.


Background

MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an
enhanced, drop-in replacement for MySQL.


Affected Packages

Package: dev-db/mysql
Vulnerable: < 5.6.22
Unaffected: >= 5.6.22
Architectures: All supported architectures

Package: dev-db/mariadb
Vulnerable: < 10.0.16
Unaffected: >= 10.0.16
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in MySQL and MariaDB.
Please review the CVE identifiers referenced below for details.


Impact

A remote attacker could exploit vulnerabilities to possibly cause a
Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All MySQL users should upgrade to the latest version: