maria-developers team mailing list archive
Mailing list archive
Re: Several CVE's in Oracle MySQL, is MariaDB vulnerable?
On Oct 25, Christian Rebischke wrote:
> Sorry for disturbing again. On your security page
> https://mariadb.com/kb/en/mariadb/security/ are the following CVE's
> I am not sure if mariadb is affected by them or not. Would be awesome
> if you could add them at the right section :-)
Not affected, that's why they aren't listed. The security page lists all
CVEs that affected MariaDB and the version when they were fixed. CVEs
that never affected us are not listed.
It's for memcached plugin, we don't have it.
They're all for MySQL-5.6, for the code that we don't have. MySQL-5.5
was the last version when we merged everything from MySQL. That is,
MariaDB is based on MySQL-5.5 codebase, we only merge InnoDB and
Performance Schema from 5.6.