← Back to team overview

maria-discuss team mailing list archive

Re: Critical Update for CVE-2016-6662

 

Hi Sergei,

My bad , was a bit paranoid and instantly sent the email before deeper research. Upgrading all hosts to 10.1.17.

Regards,
Alex


On 9/12/2016 9:25 PM, Sergei Golubchik wrote:
Hi, Alex!

On Sep 12, Alex wrote:
Hello,

In regards to this zero day remote exploit , it seems MariaDB is also
affected. Percona seems to have released new versions out to fix this.
Any news from MariaDB side ?

http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html
Yes, it was https://jira.mariadb.org/browse/MDEV-10465,
fixed in 5.5.51, 10.0.27, 10.1.17, all released last month.

Regards,
Sergei
Chief Architect MariaDB
and security@xxxxxxxxxxx



References