Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:1315-1

Опубликовано: 16 мая 2017
Источник: suse-cvrf

Описание

Security update for mariadb

This update for mariadb fixes the following issues:

  • update to MariaDB 10.0.30 GA

    • notable changes:
      • XtraDB updated to 5.6.35-80.0
      • TokuDB updated to 5.6.35-80.0
      • PCRE updated to 8.40
      • MDEV-11027: better InnoDB crash recovery progress reporting
      • MDEV-11520: improvements to how InnoDB data files are extended
      • Improvements to InnoDB startup/shutdown to make it more robust
      • MDEV-11233: fix for FULLTEXT index crash
      • MDEV-6143: MariaDB Linux binary tarballs will now always untar to directories that match their filename
    • release notes and changelog:
    • fixes the following CVEs: CVE-2017-3313: unspecified vulnerability affecting the MyISAM component [bsc#1020890] CVE-2017-3302: Use after free in libmysqlclient.so [bsc#1022428]

  • set the default umask to 077 in mysql-systemd-helper [bsc#1020976]

  • [bsc#1034911] - tracker bug

    • fixes also [bsc#1020868]

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
libmysqlclient18-10.0.30-25.1
libmysqlclient18-32bit-10.0.30-25.1
libmysqlclient_r18-10.0.30-25.1
libmysqlclient_r18-32bit-10.0.30-25.1
mariadb-10.0.30-25.1
mariadb-client-10.0.30-25.1
mariadb-errormessages-10.0.30-25.1
SUSE Linux Enterprise Desktop 12 SP2
libmysqlclient18-10.0.30-25.1
libmysqlclient18-32bit-10.0.30-25.1
libmysqlclient_r18-10.0.30-25.1
libmysqlclient_r18-32bit-10.0.30-25.1
mariadb-10.0.30-25.1
mariadb-client-10.0.30-25.1
mariadb-errormessages-10.0.30-25.1
SUSE Linux Enterprise Server 12 SP1
libmysqlclient18-10.0.30-25.1
libmysqlclient18-32bit-10.0.30-25.1
mariadb-10.0.30-25.1
mariadb-client-10.0.30-25.1
mariadb-errormessages-10.0.30-25.1
mariadb-tools-10.0.30-25.1
SUSE Linux Enterprise Server 12 SP2
libmysqlclient18-10.0.30-25.1
libmysqlclient18-32bit-10.0.30-25.1
mariadb-10.0.30-25.1
mariadb-client-10.0.30-25.1
mariadb-errormessages-10.0.30-25.1
mariadb-tools-10.0.30-25.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libmysqlclient18-10.0.30-25.1
mariadb-10.0.30-25.1
mariadb-client-10.0.30-25.1
mariadb-errormessages-10.0.30-25.1
mariadb-tools-10.0.30-25.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libmysqlclient18-10.0.30-25.1
libmysqlclient18-32bit-10.0.30-25.1
mariadb-10.0.30-25.1
mariadb-client-10.0.30-25.1
mariadb-errormessages-10.0.30-25.1
mariadb-tools-10.0.30-25.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libmysqlclient18-10.0.30-25.1
libmysqlclient18-32bit-10.0.30-25.1
mariadb-10.0.30-25.1
mariadb-client-10.0.30-25.1
mariadb-errormessages-10.0.30-25.1
mariadb-tools-10.0.30-25.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libmysqlclient-devel-10.0.30-25.1
libmysqlclient_r18-10.0.30-25.1
libmysqld-devel-10.0.30-25.1
libmysqld18-10.0.30-25.1
SUSE Linux Enterprise Software Development Kit 12 SP2
libmysqlclient-devel-10.0.30-25.1
libmysqlclient_r18-10.0.30-25.1
libmysqld-devel-10.0.30-25.1
libmysqld18-10.0.30-25.1
SUSE Linux Enterprise Workstation Extension 12 SP1
libmysqlclient_r18-10.0.30-25.1
libmysqlclient_r18-32bit-10.0.30-25.1
SUSE Linux Enterprise Workstation Extension 12 SP2
libmysqlclient_r18-10.0.30-25.1
libmysqlclient_r18-32bit-10.0.30-25.1

Ссылки

Описание

Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.30-25.1
SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.30-25.1
SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.30-25.1
SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.30-25.1
Ссылки

Описание

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS v3.0 Base Score 4.7 (Confidentiality impacts).

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-10.0.30-25.1
SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient18-32bit-10.0.30-25.1
SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-10.0.30-25.1
SUSE Linux Enterprise Desktop 12 SP1:libmysqlclient_r18-32bit-10.0.30-25.1
Ссылки
Уязвимость SUSE-SU-2017:1315-1