Past Incidents

Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.35. [DLA 1407-1]

We will install the update tonight during our maintenance window. We expect only a short downtime, caused by the mariadb-server restart.

• https://mariadb.com/kb/en/mariadb/mariadb-10033-release-notes/
• https://mariadb.com/kb/en/mariadb/mariadb-10034-release-notes/
• https://mariadb.com/kb/en/mariadb/mariadb-10035-release-notes/

Please see the MariaDB 10.0 Release Notes above for further details.

• mariadb-client/oldstable 10.0.35-0+deb8u1 all [upgradable from: 10.0.32-0+deb8u1]
• mariadb-client-10.0/oldstable 10.0.35-0+deb8u1 amd64 [upgradable from: 10.0.32-0+deb8u1]
• mariadb-client-core-10.0/oldstable 10.0.35-0+deb8u1 amd64 [upgradable from: 10.0.32-0+deb8u1]
• mariadb-common/oldstable 10.0.35-0+deb8u1 all [upgradable from: 10.0.32-0+deb8u1]
• mariadb-server/oldstable 10.0.35-0+deb8u1 all [upgradable from: 10.0.32-0+deb8u1]
• mariadb-server-10.0/oldstable 10.0.35-0+deb8u1 amd64 [upgradable from: 10.0.32-0+deb8u1]
• mariadb-server-core-10.0/oldstable 10.0.35-0+deb8u1 amd64 [upgradable from: 10.0.32-0+deb8u1]

Start maintenance window: 03/07/2018 01:00 CEST
Stop maintenance window: 03/07/2018 02:00 CEST

Various security issues were discovered in Graphicsmagick, a collection of image processing tools. Heap-based buffer overflows or overreads may lead to a denial of service or disclosure of in-memory information or other unspecified impact by processing a malformed image file. more information: DLA 1401-1

We have updated graphicsmagick to the latest version.

• graphicsmagick/oldstable 1.3.20-3+deb8u3 amd64 [upgradable from: 1.3.20-3+deb8u2]
• libgraphicsmagick3/oldstable 1.3.20-3+deb8u3 amd64 [upgradable from: 1.3.20-3+deb8u2]

Several vulnerabilities were found in PHP, a widely-used open source general purpose scripting language. more information: DLA 1397-1

We have updated php5 to the latest version.

• php5-cli/oldstable 5.6.36+dfsg-0+deb8u1 amd64 [upgradable from: 5.6.33+dfsg-0+deb8u1]
• php5-common/oldstable 5.6.36+dfsg-0+deb8u1 amd64 [upgradable from: 5.6.33+dfsg-0+deb8u1]
• php5-curl/oldstable 5.6.36+dfsg-0+deb8u1 amd64 [upgradable from: 5.6.33+dfsg-0+deb8u1]
• php5-fpm/oldstable 5.6.36+dfsg-0+deb8u1 amd64 [upgradable from: 5.6.33+dfsg-0+deb8u1]
• php5-gd/oldstable 5.6.36+dfsg-0+deb8u1 amd64 [upgradable from: 5.6.33+dfsg-0+deb8u1]
• php5-imap/oldstable 5.6.36+dfsg-0+deb8u1 amd64 [upgradable from: 5.6.33+dfsg-0+deb8u1]
• php5-mysql/oldstable 5.6.36+dfsg-0+deb8u1 amd64 [upgradable from: 5.6.33+dfsg-0+deb8u1]
• php5-readline/oldstable 5.6.36+dfsg-0+deb8u1 amd64 [upgradable from: 5.6.33+dfsg-0+deb8u1]

This change adds the PostgreSQL contrib package to any PostgreSQL installation. The PostgreSQL contrib package provides several additional features for the PostgreSQL database.

Closes #354