gpp_maybe Security update for mariadb

SUSE-SLE-SAP-12-2017-1244

This MariaDB update to version 10.0.31 GA fixes the following issues: Security issues fixed: - CVE-2017-3308: Subcomponent: Server: DML: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3309: Subcomponent: Server: Optimizer: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3453: Subcomponent: Server: Optimizer: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3456: Subcomponent: Server: DML: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) - CVE-2017-3464: Subcomponent: Server: DDL: Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS). (bsc#1048715) Bug fixes: - XtraDB updated to 5.6.36-82.0 - TokuDB updated to 5.6.36-82.0 - Innodb updated to 5.6.36 - Performance Schema updated to 5.6.36 Release notes and changelog: - https://kb.askmonty.org/en/mariadb-10031-release-notes - https://kb.askmonty.org/en/mariadb-10031-changelog

• Release Date
  Aug 3 2017
• References
  Bugzilla: 1048715
  CVEs: CVE-2017-3308, CVE-2017-3464, CVE-2017-3456, CVE-2017-3453, CVE-2017-3309
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12 x86_64

• Packages
  libmysqlclient-devel
  MariaDB development header files and libraries

  10.0.31-20.29.1 lock rpm

  libmysqlclient18
  Shared Libraries for MariaDB

  10.0.31-20.29.1 lock rpm

  libmysqlclient18-32bit
  Shared Libraries for MariaDB

  10.0.31-20.29.1 lock rpm

  libmysqlclient_r18
  Shared Libraries for MariaDB

  10.0.31-20.29.1 lock rpm

  libmysqld-devel
  MariaDB embedded server development files

  10.0.31-20.29.1 lock rpm

  libmysqld18
  MariaDB embedded server development files

  10.0.31-20.29.1 lock rpm

  mariadb
  Server part of MariaDB

  10.0.31-20.29.1 lock rpm lock src

  mariadb-client
  Client for MariaDB

  10.0.31-20.29.1 lock rpm

  mariadb-errormessages
  MySQL Community Server development header files and libraries

  10.0.31-20.29.1 lock rpm

  mariadb-tools
  MariaDB tools

  10.0.31-20.29.1 lock rpm