{"id":"MGASA-2015-0279","summary":"Updated mariadb package fixes security vulnerabilities","details":"The mariadb package has been updated to versions 5.5.44 and 10.0.20 in\nMageia 4 and Mageia 5, respectively.  Both fix an issue where the client\nis vulnerable to a man-in-the-middle attack when using the --ssl option,\nwhere  the SSL/TLS protection could be disabled (CVE-2015-3152).\n\nThe Mageia 4 update also fixes other unspecified security issues, such as\nCVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-4737,\nand CVE-2015-4752.  Refer to the Oracle Critical Patch Update for details.\n","modified":"2026-04-16T06:24:42.257260990Z","published":"2015-07-27T09:53:07Z","upstream":["CVE-2015-2582","CVE-2015-2620","CVE-2015-2643","CVE-2015-2648","CVE-2015-3152","CVE-2015-4737","CVE-2015-4752"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2015-0279.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=16146"},{"type":"WEB","url":"https://mariadb.com/kb/en/mariadb/mariadb-5544-release-notes/"},{"type":"WEB","url":"https://mariadb.com/kb/en/mariadb/mariadb-10020-release-notes/"},{"type":"WEB","url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"},{"type":"WEB","url":"https://lists.fedoraproject.org/pipermail/package-announce/2015-July/161436.html"}],"affected":[{"package":{"name":"mariadb","ecosystem":"Mageia:4","purl":"pkg:rpm/mageia/mariadb?arch=source&distro=mageia-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.44-1.mga4"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2015-0279.json"}},{"package":{"name":"mariadb","ecosystem":"Mageia:5","purl":"pkg:rpm/mageia/mariadb?arch=source&distro=mageia-5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.20-1.mga5"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2015-0279.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}