CVE-2017-15945

Name of the Vulnerable Software and Affected Versions Gentoo dev-db/mysql versions prior to 2017-09-29 Gentoo dev-db/mariadb versions prior to 2017-09-29 Gentoo dev-db/percona-server versions prior to 2017-09-29 Gentoo dev-db/mysql-cluster versions prior to 2017-09-29 Gentoo dev-db/mariadb-galera versions prior to 2017-09-29

Description The issue allows local users to gain privileges by leveraging access to the mysql account for creation of a link, due to chown calls for user-writable directory trees in the installation scripts.

Recommendations For Gentoo dev-db/mysql versions prior to 2017-09-29, update to a version released after 2017-09-29 to resolve the issue. For Gentoo dev-db/mariadb versions prior to 2017-09-29, update to a version released after 2017-09-29 to resolve the issue. For Gentoo dev-db/percona-server versions prior to 2017-09-29, update to a version released after 2017-09-29 to resolve the issue. For Gentoo dev-db/mysql-cluster versions prior to 2017-09-29, update to a version released after 2017-09-29 to resolve the issue. For Gentoo dev-db/mariadb-galera versions prior to 2017-09-29, update to a version released after 2017-09-29 to resolve the issue.