Security update for mariadb, mariadb-connector-c (important)

An update that fixes three vulnerabilities is now available.

Description:

This update for mariadb and mariadb-connector-c fixes the following issues:

mariadb:

• Update to version 10.2.25 (bsc#1136035)
• CVE-2019-2628: Fixed a remote denial of service by an privileged
  attacker (bsc#1136035).
• CVE-2019-2627: Fixed another remote denial of service by an privileged
  attacker (bsc#1136035).
• CVE-2019-2614: Fixed a potential remote denial of service by an
  privileged attacker (bsc#1136035).
• Fixed reading options for multiple instances if my${INSTANCE}.cnf is
  used (bsc#1132666)

mariadb-connector-c:

• Update to version 3.1.2 (bsc#1136035)
• Moved libmariadb.pc from /usr/lib/pkgconfig to /usr/lib64/pkgconfig for
  x86_64 (bsc#1126088)

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2019-1913=1