SUSE-SU-2018:1771-1

Source
https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1771-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2018:1771-1
Related
Published
2018-06-21T10:44:42Z
Modified
2018-06-21T10:44:42Z
Summary
Security update for mariadb, mariadb-connector-c, xtrabackup
Details

This MariaDB update to version 10.2.15 brings the following fixes and improvements.

Security issues:

  • CVE-2018-2767: The embedded server library now supports SSL when connecting to remote servers (bsc#1088681).
  • Collected CVEs fixes:
    • 10.2.15: CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810, CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766, CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761, CVE-2018-2781, CVE-2018-2771, CVE-2018-2813

Bugfixes:

  • bsc#1092544: Update suseskippedtests.list and add tests that are failing with GCC 8.
  • bsc#1080891: Compile option DWITH_SYSTEMD=ON is no longer needed - systemd is detected automatically.
References

Affected packages

SUSE:HPE Helion OpenStack 8 / mariadb

Package

Name
mariadb
Purl
pkg:rpm/suse/mariadb&distro=HPE%20Helion%20OpenStack%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.2.15-4.3.1

Ecosystem specific

{
    "binaries": [
        {
            "mariadb-galera": "10.2.15-4.3.1",
            "mariadb-errormessages": "10.2.15-4.3.1",
            "mariadb-tools": "10.2.15-4.3.1",
            "mariadb": "10.2.15-4.3.1",
            "xtrabackup": "2.4.10-4.3.1",
            "mariadb-client": "10.2.15-4.3.1",
            "libmariadb3": "3.0.3-3.3.1"
        }
    ]
}

SUSE:HPE Helion OpenStack 8 / mariadb-connector-c

Package

Name
mariadb-connector-c
Purl
pkg:rpm/suse/mariadb-connector-c&distro=HPE%20Helion%20OpenStack%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.3-3.3.1

Ecosystem specific

{
    "binaries": [
        {
            "mariadb-galera": "10.2.15-4.3.1",
            "mariadb-errormessages": "10.2.15-4.3.1",
            "mariadb-tools": "10.2.15-4.3.1",
            "mariadb": "10.2.15-4.3.1",
            "xtrabackup": "2.4.10-4.3.1",
            "mariadb-client": "10.2.15-4.3.1",
            "libmariadb3": "3.0.3-3.3.1"
        }
    ]
}

SUSE:HPE Helion OpenStack 8 / xtrabackup

Package

Name
xtrabackup
Purl
pkg:rpm/suse/xtrabackup&distro=HPE%20Helion%20OpenStack%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.4.10-4.3.1

Ecosystem specific

{
    "binaries": [
        {
            "mariadb-galera": "10.2.15-4.3.1",
            "mariadb-errormessages": "10.2.15-4.3.1",
            "mariadb-tools": "10.2.15-4.3.1",
            "mariadb": "10.2.15-4.3.1",
            "xtrabackup": "2.4.10-4.3.1",
            "mariadb-client": "10.2.15-4.3.1",
            "libmariadb3": "3.0.3-3.3.1"
        }
    ]
}

SUSE:OpenStack Cloud 8 / mariadb

Package

Name
mariadb
Purl
pkg:rpm/suse/mariadb&distro=SUSE%20OpenStack%20Cloud%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.2.15-4.3.1

Ecosystem specific

{
    "binaries": [
        {
            "mariadb-galera": "10.2.15-4.3.1",
            "mariadb-errormessages": "10.2.15-4.3.1",
            "mariadb-tools": "10.2.15-4.3.1",
            "mariadb": "10.2.15-4.3.1",
            "xtrabackup": "2.4.10-4.3.1",
            "mariadb-client": "10.2.15-4.3.1",
            "libmariadb3": "3.0.3-3.3.1"
        }
    ]
}

SUSE:OpenStack Cloud 8 / mariadb-connector-c

Package

Name
mariadb-connector-c
Purl
pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20OpenStack%20Cloud%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.3-3.3.1

Ecosystem specific

{
    "binaries": [
        {
            "mariadb-galera": "10.2.15-4.3.1",
            "mariadb-errormessages": "10.2.15-4.3.1",
            "mariadb-tools": "10.2.15-4.3.1",
            "mariadb": "10.2.15-4.3.1",
            "xtrabackup": "2.4.10-4.3.1",
            "mariadb-client": "10.2.15-4.3.1",
            "libmariadb3": "3.0.3-3.3.1"
        }
    ]
}

SUSE:OpenStack Cloud 8 / xtrabackup

Package

Name
xtrabackup
Purl
pkg:rpm/suse/xtrabackup&distro=SUSE%20OpenStack%20Cloud%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.4.10-4.3.1

Ecosystem specific

{
    "binaries": [
        {
            "mariadb-galera": "10.2.15-4.3.1",
            "mariadb-errormessages": "10.2.15-4.3.1",
            "mariadb-tools": "10.2.15-4.3.1",
            "mariadb": "10.2.15-4.3.1",
            "xtrabackup": "2.4.10-4.3.1",
            "mariadb-client": "10.2.15-4.3.1",
            "libmariadb3": "3.0.3-3.3.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 8 / mariadb

Package

Name
mariadb
Purl
pkg:rpm/suse/mariadb&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.2.15-4.3.1

Ecosystem specific

{
    "binaries": [
        {
            "mariadb-galera": "10.2.15-4.3.1",
            "mariadb-errormessages": "10.2.15-4.3.1",
            "mariadb-tools": "10.2.15-4.3.1",
            "mariadb": "10.2.15-4.3.1",
            "xtrabackup": "2.4.10-4.3.1",
            "mariadb-client": "10.2.15-4.3.1",
            "libmariadb3": "3.0.3-3.3.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 8 / mariadb-connector-c

Package

Name
mariadb-connector-c
Purl
pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.3-3.3.1

Ecosystem specific

{
    "binaries": [
        {
            "mariadb-galera": "10.2.15-4.3.1",
            "mariadb-errormessages": "10.2.15-4.3.1",
            "mariadb-tools": "10.2.15-4.3.1",
            "mariadb": "10.2.15-4.3.1",
            "xtrabackup": "2.4.10-4.3.1",
            "mariadb-client": "10.2.15-4.3.1",
            "libmariadb3": "3.0.3-3.3.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 8 / xtrabackup

Package

Name
xtrabackup
Purl
pkg:rpm/suse/xtrabackup&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.4.10-4.3.1

Ecosystem specific

{
    "binaries": [
        {
            "mariadb-galera": "10.2.15-4.3.1",
            "mariadb-errormessages": "10.2.15-4.3.1",
            "mariadb-tools": "10.2.15-4.3.1",
            "mariadb": "10.2.15-4.3.1",
            "xtrabackup": "2.4.10-4.3.1",
            "mariadb-client": "10.2.15-4.3.1",
            "libmariadb3": "3.0.3-3.3.1"
        }
    ]
}