openSUSE Build Service

Security update for mariadb

This update for mariadb to version 10.2.22 fixes the following issues:

Security issues fixed:

- CVE-2019-2510: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
- CVE-2019-2537: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
- CVE-2018-3284: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112377)
- CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
- CVE-2018-3277: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112391)
- CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
- CVE-2018-3200: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112404)
- CVE-2018-3185: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112384)
- CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
- CVE-2018-3173: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112386)
- CVE-2018-3162: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112415)
- CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
- CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
- CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
- CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
- CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
- CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
- CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security issues fixed:

- Fixed an issue where mysl_install_db fails due to incorrect basedir (bsc#1127027).
- Fixed an issue where the lograte was not working (bsc#1112767).
- Backport Information Schema CHECK_CONSTRAINTS Table.
- Maximum value of table_definition_cache is now 2097152.
- InnoDB ALTER TABLE fixes.
- Galera crash recovery fixes.
- Encryption fixes.
- Remove xtrabackup dependency as MariaDB ships a build in mariabackup so xtrabackup is not needed (bsc#1122475).
- Maria DB testsuite - test main.plugin_auth failed (bsc#1111859)
- Maria DB testsuite - test encryption.second_plugin-12863 failed (bsc#1111858)
- Remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
- remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
- Database corruption after renaming a prefix-indexed column (bsc#1120041)

Release notes and changelog:

- https://mariadb.com/kb/en/library/mariadb-10222-release-notes
- https://mariadb.com/kb/en/library/mariadb-10222-changelog/

This update was imported from the SUSE:SLE-15:Update update project.

Submitted by Kristyna Streitova (kstreitova)

Fixed bugs

bnc#1127027

mysql_install_db fails because basedir is incorrect

bnc#1112397

VUL-0: CVE-2018-3251: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

bnc#1112368

VUL-0: CVE-2018-3174: mysql: Client programs unspecified vulnerability (CPU Oct 2018)

bnc#1112391

VUL-0: CVE-2018-3277: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

bnc#1103342

VUL-0: CVE-2018-3064: mysql: InnoDB unspecified vulnerability (CPU Jul 2018)

bnc#1112421

VUL-0: CVE-2018-3143: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

bnc#1118754

mariadb: PerconaFT is AGPL and should be removed from the package

bnc#1120041

Planned mariadb 10.2.19 update cause corruption on some alter table statements

bnc#1112377

VUL-0: CVE-2018-3284: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

bnc#1101677

VUL-0: CVE-2018-3063: mysql: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges).

bnc#1101678

VUL-0: CVE-2018-3066: mysql: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options).

bnc#1013882

VUL-0: CVE-2016-9843: zlib: Big-endian out-of-bounds pointer

bnc#1111858

Maria DB testsuite - test encryption.second_plugin-12863 failed

bnc#1112432

VUL-0: CVE-2018-3282: mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)

bnc#1112417

VUL-0: CVE-2018-3156: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

bnc#1116686

VUL-0: mariadb: 10.2.19,10.0.35 security release, mariadb-c-connector: 3.0.7 release

bnc#1112404

VUL-0: CVE-2018-3200: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

bnc#1112386

VUL-0: CVE-2018-3173: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

bnc#1101676

VUL-0: CVE-2018-3058: mysql: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM).

bnc#1112384

VUL-0: CVE-2018-3185: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

bnc#1112415

VUL-0: CVE-2018-3162: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

bnc#1122198

VUL-0: mysql: Tracker bug for Oracle Critical Patch Update Advisory - January 2019

bnc#1112767

L3: MySQL logrotate not working

bnc#1122475

mariadb-test requires libmariadb_plugins

bnc#1111859

Maria DB testsuite - test main.plugin_auth failed

Places

Fixed bugs

Selected Binaries

Places