Past Incidents

Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.35. [DLA 1407-1]

We will install the update tonight during our maintenance window. We expect only a short downtime, caused by the mariadb-server restart.

• https://mariadb.com/kb/en/mariadb/mariadb-10033-release-notes/
• https://mariadb.com/kb/en/mariadb/mariadb-10034-release-notes/
• https://mariadb.com/kb/en/mariadb/mariadb-10035-release-notes/

Please see the MariaDB 10.0 Release Notes above for further details.

• mariadb-client/oldstable 10.0.35-0+deb8u1 all [upgradable from: 10.0.32-0+deb8u1]
• mariadb-client-10.0/oldstable 10.0.35-0+deb8u1 amd64 [upgradable from: 10.0.32-0+deb8u1]
• mariadb-client-core-10.0/oldstable 10.0.35-0+deb8u1 amd64 [upgradable from: 10.0.32-0+deb8u1]
• mariadb-common/oldstable 10.0.35-0+deb8u1 all [upgradable from: 10.0.32-0+deb8u1]
• mariadb-server/oldstable 10.0.35-0+deb8u1 all [upgradable from: 10.0.32-0+deb8u1]
• mariadb-server-10.0/oldstable 10.0.35-0+deb8u1 amd64 [upgradable from: 10.0.32-0+deb8u1]
• mariadb-server-core-10.0/oldstable 10.0.35-0+deb8u1 amd64 [upgradable from: 10.0.32-0+deb8u1]

Start maintenance window: 03/07/2018 01:00 CEST
Stop maintenance window: 03/07/2018 02:00 CEST

Various security issues were discovered in Graphicsmagick, a collection of image processing tools. Heap-based buffer overflows or overreads may lead to a denial of service or disclosure of in-memory information or other unspecified impact by processing a malformed image file. more information: DLA 1401-1

We have updated graphicsmagick to the latest version.

• graphicsmagick/oldstable 1.3.20-3+deb8u3 amd64 [upgradable from: 1.3.20-3+deb8u2]
• libgraphicsmagick3/oldstable 1.3.20-3+deb8u3 amd64 [upgradable from: 1.3.20-3+deb8u2]