Overview

File _patchinfo of Package patchinfo.9545

<patchinfo incident="9545">
  <issue tracker="bnc" id="1127027">mysql_install_db fails because basedir is incorrect</issue>
  <issue tracker="bnc" id="1112397">VUL-0: CVE-2018-3251: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)</issue>
  <issue tracker="bnc" id="1112368">VUL-0: CVE-2018-3174: mysql: Client programs unspecified vulnerability (CPU Oct 2018)</issue>
  <issue tracker="bnc" id="1112391">VUL-0: CVE-2018-3277: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)</issue>
  <issue tracker="bnc" id="1103342">VUL-0: CVE-2018-3064: mysql: InnoDB unspecified vulnerability (CPU Jul 2018)</issue>
  <issue tracker="bnc" id="1112421">VUL-0: CVE-2018-3143: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)</issue>
  <issue tracker="bnc" id="1118754">mariadb: PerconaFT is AGPL and should be removed from the package</issue>
  <issue tracker="bnc" id="1120041">Planned mariadb 10.2.19 update cause corruption on some alter table statements</issue>
  <issue tracker="bnc" id="1112377">VUL-0: CVE-2018-3284: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)</issue>
  <issue tracker="bnc" id="1101677">VUL-0: CVE-2018-3063: mysql: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges).</issue>
  <issue tracker="bnc" id="1101678">VUL-0: CVE-2018-3066: mysql: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options).</issue>
  <issue tracker="bnc" id="1013882">VUL-0: CVE-2016-9843: zlib: Big-endian out-of-bounds pointer</issue>
  <issue tracker="bnc" id="1111858">Maria DB testsuite - test encryption.second_plugin-12863 failed</issue>
  <issue tracker="bnc" id="1112432">VUL-0: CVE-2018-3282: mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)</issue>
  <issue tracker="bnc" id="1112417">VUL-0: CVE-2018-3156: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)</issue>
  <issue tracker="bnc" id="1116686">VUL-0: mariadb: 10.2.19,10.0.35 security release, mariadb-c-connector: 3.0.7 release</issue>
  <issue tracker="bnc" id="1112404">VUL-0: CVE-2018-3200: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)</issue>
  <issue tracker="bnc" id="1112386">VUL-0: CVE-2018-3173: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)</issue>
  <issue tracker="bnc" id="1101676">VUL-0: CVE-2018-3058: mysql: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM).</issue>
  <issue tracker="bnc" id="1112384">VUL-0: CVE-2018-3185: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)</issue>
  <issue tracker="bnc" id="1112415">VUL-0: CVE-2018-3162: mysql: InnoDB unspecified vulnerability (CPU Oct 2018)</issue>
  <issue id="1122198" tracker="bnc">VUL-0: mysql: Tracker bug for Oracle Critical Patch Update Advisory - January 2019</issue>
  <issue tracker="bnc" id="1112767">L3: MySQL logrotate not working</issue>
  <issue tracker="bnc" id="1122475">mariadb-test requires libmariadb_plugins</issue>
  <issue tracker="bnc" id="1111859">Maria DB testsuite - test main.plugin_auth failed</issue>
  <issue tracker="cve" id="2019-2537"/>
  <issue tracker="cve" id="2019-2510"/>
  <issue tracker="cve" id="2018-3173"/>
  <issue tracker="cve" id="2018-3162"/>
  <issue tracker="cve" id="2018-3143"/>
  <issue tracker="cve" id="2018-3174"/>
  <issue tracker="cve" id="2018-3066"/>
  <issue tracker="cve" id="2018-3058"/>
  <issue tracker="cve" id="2018-3185"/>
  <issue tracker="cve" id="2016-9843"/>
  <issue tracker="cve" id="2018-3200"/>
  <issue tracker="cve" id="2018-3251"/>
  <issue tracker="cve" id="2018-3284"/>
  <issue tracker="cve" id="2018-3064"/>
  <issue tracker="cve" id="2018-3277"/>
  <issue tracker="cve" id="2018-3060"/>
  <issue tracker="cve" id="2018-3282"/>
  <issue tracker="cve" id="2018-3156"/>
  <issue tracker="cve" id="2018-3063"/>
  <category>security</category>
  <rating>important</rating>
  <packager>kstreitova</packager>
  <description>This update for mariadb to version 10.2.22 fixes the following issues:

Security issues fixed:

- CVE-2019-2510: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198). 
- CVE-2019-2537: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
- CVE-2018-3284: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112377)
- CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
- CVE-2018-3277: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112391)
- CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
- CVE-2018-3200: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112404)
- CVE-2018-3185: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112384)
- CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
- CVE-2018-3173: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112386)
- CVE-2018-3162: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112415)
- CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
- CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
- CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
- CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
- CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
- CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
- CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security issues fixed:

- Fixed an issue where mysl_install_db fails due to incorrect basedir (bsc#1127027).
- Fixed an issue where the lograte was not working (bsc#1112767).
- Backport Information Schema CHECK_CONSTRAINTS Table.
- Maximum value of table_definition_cache is now 2097152.
- InnoDB ALTER TABLE fixes.
- Galera crash recovery fixes.
- Encryption fixes.
- Remove xtrabackup dependency  as MariaDB ships a build in mariabackup so xtrabackup is not needed (bsc#1122475).
- Maria DB testsuite - test main.plugin_auth failed (bsc#1111859)
- Maria DB testsuite - test encryption.second_plugin-12863 failed (bsc#1111858)
- Remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
- remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
- Database corruption after renaming a prefix-indexed column (bsc#1120041)


Release notes and changelog:

- https://mariadb.com/kb/en/library/mariadb-10222-release-notes
- https://mariadb.com/kb/en/library/mariadb-10222-changelog/
</description>
  <summary>Security update for mariadb</summary>
</patchinfo>
openSUSE Build Service is sponsored by
Places