Security update for mariadb

This mariadb version update to 10.0.29 fixes the following issues:

- CVE-2017-3318: unspecified vulnerability affecting Error Handling (bsc#1020896)
- CVE-2017-3317: unspecified vulnerability affecting Logging (bsc#1020894)
- CVE-2017-3312: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873)
- CVE-2017-3291: unrestricted mysqld_safe's ledir (bsc#1020884)
- CVE-2017-3265: unsafe chmod/chown use in init script (bsc#1020885)
- CVE-2017-3258: unspecified vulnerability in the DDL component (bsc#1020875)
- CVE-2017-3257: unspecified vulnerability affecting InnoDB (bsc#1020878)
- CVE-2017-3244: unspecified vulnerability affecing the DML component (bsc#1020877)
- CVE-2017-3243: unspecified vulnerability affecting the Charsets component (bsc#1020891)
- CVE-2017-3238: unspecified vulnerability affecting the Optimizer component (bsc#1020882)
- CVE-2016-6664: Root Privilege Escalation (bsc#1008253)
- Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428)

- notable changes:
* XtraDB updated to 5.6.34-79.1
* TokuDB updated to 5.6.34-79.1
* Innodb updated to 5.6.35
* Performance Schema updated to 5.6.35

Release notes and changelog:
* https://kb.askmonty.org/en/mariadb-10029-release-notes
* https://kb.askmonty.org/en/mariadb-10029-changelog

This update was imported from the SUSE:SLE-12-SP1:Update update project.

Fixed bugs
bnc#1022428
VUL-0: mariadb: Use after free in libmysqlclient.so
bnc#1020875
VUL-0: CVE-2017-3258: mariadb,mysql: unspecified vulnerability in the DDL component (CPU Jan 2017)
bnc#1020877
VUL-0: CVE-2017-3244: mariadb,mysql: unspecified vulnerability affecing the DML component (CPU Jan 2017)
bnc#1020873
VUL-0: CVE-2017-3312: mariadb,mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664
bnc#1008253
VUL-0: CVE-2016-6664: mariadb,mysql: Root Privilege Escalation
bnc#1020885
VUL-0: CVE-2017-3265: mariadb,mysql: unsafe chmod/chown use in init script (CPU Jan 2017)
bnc#1020894
VUL-0: CVE-2017-3317: mariadb,mysql: unspecified vulnerability affecting Logging (CPU Jan 2017)
bnc#1020878
VUL-0: CVE-2017-3257 mariadb,mysql: unspecified vulnerability affecting InnoDB (CPU Jan 2017)
bnc#1020882
VUL-0: CVE-2017-3238: mariadb,mysql: unspecified vulnerability affecting the Optimizer component (CPU Jan 2017)
bnc#1020884
VUL-0: CVE-2017-3291: mariadb,mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)
bnc#1020891
VUL-0: CVE-2017-3243: mariadb,mysql: unspecified vulnerability affecting the Charsets component (CPU Jan 2017)
bnc#1020896
VUL-0: CVE-2017-3318: mariadb,mysql: unspecified vulnerability affecting Error Handling (CPU Jan 2017)
bnc#1020868
VUL-0: [TRACKERBUG] mysql,mariadb: Oracle Critical Patch Update Jan 2017
Selected Binaries
openSUSE Build Service is sponsored by