Lucene search

K
suseSuseOPENSUSE-SU-2018:1800-1
HistoryJun 23, 2018 - 3:12 a.m.

Security update for mariadb (important)

2018-06-2303:12:07
lists.opensuse.org
179

0.003 Low

EPSS

Percentile

65.0%

This update for MariaDB to version 10.0.35 fixes multiple issues:

Security issues fixed:

  • CVE-2018-2782: Unspecified DoS vulnerability in InnoDB (bsc#1090518)
  • CVE-2018-2784: Unspecified DoS vulnerability in InnoDB (bsc#1090518)
  • CVE-2018-2787: Unspecified vulnerability in InnoDB allowing writes
    (bsc#1090518)
  • CVE-2018-2766: Unspecified DoS vulnerability InnoDB (bsc#1090518)
  • CVE-2018-2755: Unspecified vulnerability in Replication allowing server
    compromise (bsc#1090518)
  • CVE-2018-2819: Unspecified DoS vulnerability in InnoDB (bsc#1090518)
  • CVE-2018-2817: Unspecified DoS vulnerability in DDL (bsc#1090518)
  • CVE-2018-2761: Unspecified DoS vulnerability in Client programs
    (bsc#1090518)
  • CVE-2018-2781: Unspecified DoS vulnerability in Server/Optimizer
    (bsc#1090518)
  • CVE-2018-2771: Unspecified DoS vulnerability in the Server/Locking
    component (bsc#1090518)
  • CVE-2018-2813: Unspecified vulnerability in The DDL component allowing
    unauthorized reads (bsc#1090518)
  • CVE-2018-2767: The embedded server library now supports SSL when
    connecting to remote servers (bsc#1088681)

The following changes are included:

  • XtraDB updated to 5.6.39-83.1
  • TokuDB updated to 5.6.39-83.1
  • InnoDB updated to 5.6.40
  • Fix for Crash in MVCC read after IMPORT TABLESPACE
  • Fix for innodb_read_only trying to modify files if transactions were
    recovered in COMMITTED state
  • Fix for DROP TABLE hang on InnoDB table with FULLTEXT index
  • Fix for Crash in INFORMATION_SCHEMA.INNODB_SYS_TABLES whenaccessing
    corrupted record

This update was imported from the SUSE:SLE-12-SP1:Update update project.