Red Hat Security Advisory 2016-2928-01

Discussion in 'News Aggregator' started by Packet Storm, 9 Dec 2016.

  1. Packet Storm

    Packet Storm Guest

    Red Hat Security Advisory 2016-2928-01 - MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The following packages have been upgraded to a newer upstream version: rh-mariadb101-mariadb. Security Fix: It was discovered that the MariaDB logging functionality allowed writing to MariaDB configuration files. An administrative database user, or a database user with FILE privileges, could possibly use this flaw to run arbitrary commands with root privileges on the system running the database server.

    Continue reading...
     

Share This Page

Loading...