Bug 18439 - mariadb 10.0.25
Summary: mariadb 10.0.25
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 5
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: has_procedure advisory MGA5-32-OK MGA...
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2016-05-11 19:07 CEST by David Walser
Modified: 2016-05-18 22:15 CEST (History)
2 users (show)

See Also:
Source RPM: mariadb-10.0.24-1.mga5.src.rpm
CVE:
Status comment:


Attachments

Description David Walser 2016-05-11 19:07:12 CEST
Upstream has released MariaDB 10.0.25 on April 30:
https://mariadb.org/mariadb-10-0-25-now-available/

It fixes five security issues:
https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/

Updated package uploaded for Mageia 5.

Advisory:
========================

Updated mariadb packages fix security vulnerabilities:

The mariadb package has been updated to version 10.0.25. It fixes several
security issues (CVE-2016-0643, CVE-2016-0647, CVE-2016-0648, CVE-2016-0655,
CVE-2016-0666) and other bugs.  See the upstream release notes for details.

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0643
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0647
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0648
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0655
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0666
https://mariadb.com/kb/en/mariadb/mariadb-10025-release-notes/
https://mariadb.com/kb/en/mariadb-10025-changelog/
========================

Updated packages in core/updates_testing:
========================
mariadb-10.0.25-1.mga5
mysql-MariaDB-10.0.25-1.mga5
mariadb-cassandra-10.0.25-1.mga5
mariadb-feedback-10.0.25-1.mga5
mariadb-oqgraph-10.0.25-1.mga5
mariadb-connect-10.0.25-1.mga5
mariadb-sphinx-10.0.25-1.mga5
mariadb-mroonga-10.0.25-1.mga5
mariadb-sequence-10.0.25-1.mga5
mariadb-spider-10.0.25-1.mga5
mariadb-extra-10.0.25-1.mga5
mariadb-obsolete-10.0.25-1.mga5
mariadb-core-10.0.25-1.mga5
mariadb-common-core-10.0.25-1.mga5
mariadb-common-10.0.25-1.mga5
mariadb-client-10.0.25-1.mga5
mariadb-bench-10.0.25-1.mga5
libmariadb18-10.0.25-1.mga5
libmariadb-devel-10.0.25-1.mga5
libmariadb-embedded18-10.0.25-1.mga5
libmariadb-embedded-devel-10.0.25-1.mga5

from mariadb-10.0.25-1.mga5.src.rpm
Comment 1 Brian Rockwell 2016-05-12 15:12:36 CEST
mga5-32bit

Linux localhost 4.1.15-desktop-2.mga5 #1 SMP Wed Jan 20 17:37:30 UTC 2016 i686 i686 i686 GNU/Linux


root@localhost brian]# urpmi mariadb
Package mariadb-10.0.25-1.mga5.i586 is already installed

rebooted - it is running

[brian@localhost ~]$ ps -ef | grep sql
mysql     2208     1  0 07:55 ?        00:00:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib/mysql/plugin --log-error=/var/log/mysqld/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/lib/mysql/mysql.sock --port=3306
brian     2614  2612  0 07:56 ?        00:00:01 /usr/sbin/mysqld --defaults-file=/home/brian/.local/share/akonadi/mysql.conf --datadir=/home/brian/.local/share/akonadi/db_data/ --socket=/tmp/akonadi-brian.ZLmawJ/mysql.socket

will continue posting tests as I get time.

CC: (none) => brtians1

Comment 2 Brian Rockwell 2016-05-12 16:55:13 CEST
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 327
Server version: 10.0.25-MariaDB Mageia MariaDB Server

Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [test]> create table lotanames (name varchar(30));
Query OK, 0 rows affected (0.06 sec)


MariaDB [test]> insert into lotanames (name) values ('Tom');
Query OK, 1 row affected (0.47 sec)
MariaDB [test]> insert into lotanames (name) values ('Dick');
Query OK, 1 row affected (0.04 sec)
MariaDB [test]> insert into lotanames (name) values ('Harry');
Query OK, 1 row affected (0.03 sec)

MariaDB [test]> select * from lotanames;
+-------+
| name  |
+-------+
| Tom   |
| Dick  |
| Harry |
+-------+
3 rows in set (0.00 sec)


Seems to be working as designed.

Whiteboard: (none) => MGA5-32-OK

Comment 3 Brian Rockwell 2016-05-14 18:14:24 CEST
mga5-64

[brian@localhost ~]$ uname -a
Linux localhost 4.1.15-desktop-2.mga5 #1 SMP Wed Jan 20 17:05:51 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 4
Server version: 10.0.25-MariaDB Mageia MariaDB Server

Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [test]> 


MariaDB [test]> create table lotanames (name varchar(30));
Query OK, 0 rows affected (0.07 sec)

MariaDB [test]> insert into lotanames (name) values ('Bill');
Query OK, 1 row affected (0.01 sec)

MariaDB [test]> insert into lotanames (name) values ('Ann');
Query OK, 1 row affected (0.01 sec)

MariaDB [test]> insert into lotanames (name) values ('Claire');
Query OK, 1 row affected (0.01 sec)

MariaDB [test]> insert into lotanames (name) values ('David');
Query OK, 1 row affected (0.01 sec)

MariaDB [test]> insert into lotanames (name) values ('TJ');
Query OK, 1 row affected (0.00 sec)

MariaDB [test]> select * from lotanames;
+--------+
| name   |
+--------+
| Bill   |
| Ann    |
| Claire |
| David  |
| TJ     |
+--------+
5 rows in set (0.00 sec)

Base system seems to be working as designed.  I obviously haven't tried any of the load or backup utils.

Working as designed

Whiteboard: MGA5-32-OK => MGA5-32-OK MGA5-64-OK

Brian Rockwell 2016-05-14 18:15:46 CEST

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

claire robinson 2016-05-18 18:47:31 CEST

Whiteboard: MGA5-32-OK MGA5-64-OK => has_procedure advisory MGA5-32-OK MGA5-64-OK

Comment 4 Mageia Robot 2016-05-18 22:15:28 CEST
An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGASA-2016-0182.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.