Branch p7 update bulletin.

Package supertuxkart updated to version 0.8.1-alt0.M70P.1 for branch p7 in task 147928.

Бэкпорт supertuxkart 0.8.1 в p7

Package MySQL updated to version 5.5.43-alt0.M70P.1 for branch p7 in task 147947.

Published: 2013-04-16

BDU:2014-00011

Уязвимость системы управления базами данных MySQL, позволяющая злоумышленнику, прошедшему аутентификацию, вызвать отказ в обслуживании

Severity: MEDIUM (4.0)

References:

Published: 2013-04-16

BDU:2014-00012

Severity: MEDIUM (4.0)

References:

Published: 2014-01-31

BDU:2014-00338

Уязвимость системы управления базами данных MySQL, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: HIGH (7.5)

References:

Published: 2014-01-31

BDU:2014-00339

Уязвимость системы управления базами данных Marida DB, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: HIGH (7.5)

References:

Published: 2014-04-15

BDU:2014-00340

Уязвимость системы управления базами данных MySQL, позволяющая удаленным пользователям, прошедшим аутентификацию, оказать воздействие на доступность данных

Severity: MEDIUM (4.0)

References:

Published: 2014-04-15

BDU:2014-00341

Severity: MEDIUM (4.0)

References:

Published: 2014-04-15

BDU:2014-00343

Severity: LOW (3.5)

References:

Published: 2014-04-15

BDU:2014-00345

Severity: MEDIUM (4.3)

References:

Published: 2014-01-15

BDU:2014-00346

Severity: LOW (2.8)

References:

Published: 2014-01-15

BDU:2014-00347

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15

BDU:2014-00348

Severity: MEDIUM (4.0)

References:

Published: 2014-04-15

BDU:2014-00350

Severity: MEDIUM (6.0)

References:

Published: 2014-04-15

BDU:2014-00351

Severity: LOW (2.8)

References:

Published: 2014-04-15

BDU:2014-00352

Severity: LOW (3.5)

References:

Published: 2014-01-15

BDU:2014-00353

Severity: MEDIUM (4.0)

References:

Published: 2014-04-15

BDU:2014-00354

Severity: LOW (2.6)

References:

Published: 2014-01-15

BDU:2014-00355

Severity: LOW (3.3)

References:

Published: 2014-01-15

BDU:2014-00356

Severity: LOW (3.5)

References:

Published: 2014-01-15

BDU:2014-00357

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15

BDU:2014-00360

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15

BDU:2014-00361

Severity: LOW (2.6)

References:

Published: 2015-04-16

BDU:2015-09979

Уязвимость системы управления базами данных MySQL, позволяющая удаленному нарушителю, прошедшим аутентификацию, нарушить доступность данных

Severity: MEDIUM (5.7)

References:

CVE-2015-0501

Published: 2015-04-16

BDU:2015-09981

Уязвимость системы управления базами данных MySQL, позволяющая удаленному нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (5.0)

References:

CVE-2015-2568

Published: 2015-04-16

BDU:2015-09982

Severity: MEDIUM (4.0)

References:

CVE-2015-2573

Published: 2015-04-16

BDU:2015-09986

Severity: MEDIUM (4.0)

References:

CVE-2015-0433

Published: 2015-04-16

BDU:2015-09988

Severity: MEDIUM (4.0)

References:

CVE-2015-2571

Published: 2015-04-16

BDU:2015-09991

Severity: MEDIUM (4.0)

References:

CVE-2015-0441

Published: 2015-04-16

BDU:2015-09993

Severity: LOW (3.5)

References:

CVE-2015-0505

Published: 2015-04-16

BDU:2015-09994

Severity: LOW (3.5)

References:

CVE-2015-0499

Published: 2015-07-14

BDU:2015-11052

Уязвимость системы управления базами данных MySQL, позволяющая нарушителю нарушить доступность защищаемой информации

Severity: LOW (3.5)

References:

CVE-2015-4757

Published: 2016-01-19

BDU:2016-00163

Уязвимость системы управления базами данных MySQL, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (4.0)

References:

CVE-2016-0502

Published: 2013-04-17
Modified: 2024-11-21

CVE-2013-1502

Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.9 and earlier allows local users to affect availability via unknown vectors related to Server Partition.

Severity: LOW (1.5)

References:

Published: 2013-04-17
Modified: 2024-11-21

CVE-2013-1511

Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

Severity: LOW (3.5)

References:

Published: 2013-04-17
Modified: 2024-11-21

CVE-2013-1532

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Information Schema.

Severity: MEDIUM (4.0)

References:

Published: 2013-04-17
Modified: 2024-11-21

CVE-2013-1544

Severity: MEDIUM (4.0)

References:

Published: 2013-03-29
Modified: 2024-11-21

CVE-2013-1861

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.

Severity: MEDIUM (5.0)

References:

Published: 2013-04-17
Modified: 2024-11-21

CVE-2013-2375

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

Severity: MEDIUM (6.5)

References:

Published: 2013-04-17
Modified: 2024-11-21

CVE-2013-2376

Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedure.

Severity: MEDIUM (4.0)

References:

Published: 2013-04-17
Modified: 2024-11-21

CVE-2013-2391

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows local users to affect confidentiality and integrity via unknown vectors related to Server Install.

Severity: LOW (3.0)

References:

Published: 2013-04-17
Modified: 2024-11-21

CVE-2013-2392

Severity: MEDIUM (4.0)

References:

Published: 2013-07-17
Modified: 2024-11-21

CVE-2013-3783

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Parser.

Severity: MEDIUM (4.0)

References:

Published: 2013-07-17
Modified: 2024-11-21

CVE-2013-3793

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language.

Severity: MEDIUM (4.0)

References:

Published: 2013-07-17
Modified: 2024-11-21

CVE-2013-3794

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Partition.

Severity: MEDIUM (4.0)

References:

Published: 2013-07-17
Modified: 2024-11-21

CVE-2013-3801

Severity: MEDIUM (5.0)

References:

Published: 2013-07-17
Modified: 2024-11-21

CVE-2013-3802

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Full Text Search.

Severity: MEDIUM (4.0)

References:

Published: 2013-07-17
Modified: 2024-11-21

CVE-2013-3804

Severity: MEDIUM (4.0)

References:

Published: 2013-07-17
Modified: 2024-11-21

CVE-2013-3805

Severity: MEDIUM (4.0)

References:

Published: 2013-07-17
Modified: 2024-11-21

CVE-2013-3808

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Options.

Severity: MEDIUM (4.0)

References:

Published: 2013-07-17
Modified: 2024-11-21

CVE-2013-3809

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log.

Severity: MEDIUM (4.0)

References:

Published: 2013-07-17
Modified: 2024-11-21

CVE-2013-3812

Severity: LOW (3.5)

References:

Published: 2013-10-16
Modified: 2024-11-21

CVE-2013-3839

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

Severity: MEDIUM (4.0)

References:

Published: 2013-10-16
Modified: 2024-11-21

CVE-2013-5807

Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Replication.

Severity: MEDIUM (4.9)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2013-5891

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2013-5908

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling.

Severity: LOW (2.6)

References:

Published: 2014-02-01
Modified: 2024-11-21

CVE-2014-0001

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

Severity: HIGH (7.5)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-0384

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0386

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0393

Severity: LOW (3.3)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0401

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors.

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0402

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0412

Severity: MEDIUM (4.0)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0420

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Replication.

Severity: LOW (2.8)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0437

Severity: LOW (3.5)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2419

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

Severity: MEDIUM (4.0)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2430

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.

Severity: LOW (3.5)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2431

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.

Severity: LOW (2.6)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2432

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated.

Severity: LOW (2.8)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2436

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RBR.

Severity: MEDIUM (6.5)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2438

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.

Severity: LOW (3.5)

References:

Published: 2014-04-16
Modified: 2024-11-21

CVE-2014-2440

Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Severity: MEDIUM (5.1)

References:

Published: 2014-07-17
Modified: 2024-11-21

CVE-2014-2494

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.

Severity: MEDIUM (4.0)

References:

Published: 2014-07-17
Modified: 2024-11-21

CVE-2014-4207

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

Severity: MEDIUM (4.0)

References:

Published: 2014-07-17
Modified: 2024-11-21

CVE-2014-4243

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED.

Severity: LOW (2.8)

References:

Published: 2014-07-17
Modified: 2024-11-21

CVE-2014-4258

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

Severity: MEDIUM (6.5)

References:

Published: 2014-07-17
Modified: 2024-11-21

CVE-2014-4260

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.

Severity: MEDIUM (5.5)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-4274

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.

Severity: MEDIUM (4.1)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-4287

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.

Severity: MEDIUM (4.0)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-6463

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.

Severity: LOW (3.3)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-6464

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.

Severity: MEDIUM (4.0)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-6469

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER.

Severity: MEDIUM (6.8)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-6478

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL.

Severity: MEDIUM (4.3)

References:

Published: 2014-10-15
Modified: 2024-11-21

CVE-2014-6484

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

Severity: MEDIUM (4.0)

References: