Your message dated Sun, 16 Dec 2018 16:56:03 +0200
with message-id
<cahj_tlcr3crwmwtaqhqggfbjwcwb5jc1nyalm1zkaeoalzd...@mail.gmail.com>
and subject line Re: [debian-mysql] Bug#905733: mariadb-10.3: CVE-2018-2767
has caused the Debian Bug report #905733,
regarding mariadb-10.3: CVE-2018-2767
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
905733: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905733
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: mariadb-10.3
Version: 10.3.0-0+exp1
Severity: grave
Tags: security upstream fixed-upstream
Hi
As per http://www.openwall.com/lists/oss-security/2018/04/08/2,
MariaDB is similarly affected by CVE-2018-2767 . Upsream confirmed
that for MariaDB this means that if one connects to the remote server
using the embedded library (libmysqld), then SSL is not enforced.
Fixed as per upstream in
https://github.com/MariaDB/server/commit/f5369faf5bbf in 5.5.60,
10.0.35, 10.1.33, 10.2.15, and 10.3.7 .
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
I uploaded today 10.3.11-1~exp1 to Debian experimental, thus this
issue can be closed.
ke 8. elok. 2018 klo 21.51 Salvatore Bonaccorso (car...@debian.org) kirjoitti:
>
> Source: mariadb-10.3
> Version: 10.3.0-0+exp1
> Severity: grave
> Tags: security upstream fixed-upstream
>
> Hi
>
> As per http://www.openwall.com/lists/oss-security/2018/04/08/2,
> MariaDB is similarly affected by CVE-2018-2767 . Upsream confirmed
> that for MariaDB this means that if one connects to the remote server
> using the embedded library (libmysqld), then SSL is not enforced.
>
> Fixed as per upstream in
> https://github.com/MariaDB/server/commit/f5369faf5bbf in 5.5.60,
> 10.0.35, 10.1.33, 10.2.15, and 10.3.7 .
>
> Regards,
> Salvatore
>
> _______________________________________________
> pkg-mysql-maint mailing list
> pkg-mysql-ma...@alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-mysql-maint
--
Otto Kekäläinen
https://keybase.io/ottok
--- End Message ---
