====================================================================

                                 CERT-Renater

                    Note d'Information No. 2016/VULN372
_____________________________________________________________________

DATE                : 07/11/2016

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running MariaDB versions prior to 10.0.28,
                            10.1.19, 5.5.53.

=====================================================================
https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/
https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/
https://mariadb.com/kb/en/mariadb/mariadb-5553-release-notes/
____________________________________________________________________

MariaDB 10.0.28 Release Notes

Release date: 28 Oct 2016

MariaDB 10.0 is a previous stable series of MariaDB. It is an evolution
of MariaDB 5.5 with several entirely new features not found anywhere
else and with backported and reimplemented features from MySQL 5.6.


This is a Stable (GA) release.


For an overview of MariaDB 10.0 see the What is MariaDB 10.0? page.


Thanks, and enjoy MariaDB!

Notable changes

      XtraDB updated to 5.6.33-79.0
      TokuDB updated to 5.6.33-79.0
      Innodb updated to 5.6.33
      Performance Schema updated to 5.6.33
      Packages for Ubuntu 16.10 Yakkety added. Use the Repository
        Configuration Tool to add the MariaDB Ubuntu repository to your
        system.

      Fixes for the following security vulnerabilities:
          CVE-2016-5616
          CVE-2016-5624
          CVE-2016-5626
          CVE-2016-3492
          CVE-2016-5629
          CVE-2016-8283
          CVE-2016-7440
          CVE-2016-5584
          CVE-2016-6663 This vulnerability was discovered by Dawid
                        Golunski.

Changelog

For a complete list of changes made in MariaDB 10.0.28, with links
to detailed information on each push, see the changelog.

____________________________________________________________________

MariaDB 10.1.18 Release Notes

Release date: 7 Nov 2016

MariaDB 10.1 is the current stable series of MariaDB. It is an
evolution of MariaDB 10.0 with several entirely new features not found
anywhere else and with backported and reimplemented features from MySQL
5.6 and 5.7.

MariaDB 10.1.19 is a Stable (GA) release.

For an overview of MariaDB 10.1 see the What is MariaDB 10.1? page.


Thanks, and enjoy MariaDB!

Notable Changes

      XtraDB updated to 5.6.33-79.0
      TokuDB updated to 5.6.33-79.0

      Fixes for the following security vulnerabilities:
          CVE-2016-7440
          CVE-2016-5584

Changelog

For a complete list of changes made in MariaDB 10.1.19, with links to
detailed information on each push, see the changelog.

____________________________________________________________________

MariaDB 5.5.53 Release Notes

Release date: 17 Oct 2016

This is a Stable (GA) release.

For a description of MariaDB 5.5 see the What is MariaDB 5.5? page.

In most respects MariaDB will work exactly as MySQL: all commands,
interfaces, libraries and APIs that exist in MySQL also exist in
MariaDB.


Updates & Bug Fixes

MariaDB 5.5.53 is a maintenance release. It includes bugfixes and
updates, including from MySQL 5.5.53.

      XtraDB updated to 5.5.52-38.3

      Fixes for the following security vulnerabilities:
          CVE-2016-7440
          CVE-2016-5584

Changelog

A full list of all changes is in the changelog.

Thanks, and enjoy MariaDB!

==========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================