Security update for mariadb, mariadb-connector-c, xtrabackup SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:1771-1 Final 1 1 2018-06-21T10:44:42Z current 2018-06-21T10:44:42Z 2018-06-21T10:44:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mariadb, mariadb-connector-c, xtrabackup This MariaDB update to version 10.2.15 brings the following fixes and improvements. Security issues: - CVE-2018-2767: The embedded server library now supports SSL when connecting to remote servers (bsc#1088681). - Collected CVEs fixes: * 10.2.15: CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810, CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766, CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761, CVE-2018-2781, CVE-2018-2771, CVE-2018-2813 Bugfixes: - bsc#1092544: Update suse_skipped_tests.list and add tests that are failing with GCC 8. - bsc#1080891: Compile option DWITH_SYSTEMD=ON is no longer needed - systemd is detected automatically. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2018-1197,SUSE-OpenStack-Cloud-8-2018-1197,SUSE-OpenStack-Cloud-Crowbar-8-2018-1197 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ Link for SUSE-SU-2018:1771-1 https://lists.suse.com/pipermail/sle-security-updates/2018-June/004210.html E-Mail link for SUSE-SU-2018:1771-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1080891 SUSE Bug 1080891 https://bugzilla.suse.com/1082318 SUSE Bug 1082318 https://bugzilla.suse.com/1088681 SUSE Bug 1088681 https://bugzilla.suse.com/1092544 SUSE Bug 1092544 https://www.suse.com/security/cve/CVE-2018-2755/ SUSE CVE CVE-2018-2755 page https://www.suse.com/security/cve/CVE-2018-2759/ SUSE CVE CVE-2018-2759 page https://www.suse.com/security/cve/CVE-2018-2761/ SUSE CVE CVE-2018-2761 page https://www.suse.com/security/cve/CVE-2018-2766/ SUSE CVE CVE-2018-2766 page https://www.suse.com/security/cve/CVE-2018-2767/ SUSE CVE CVE-2018-2767 page https://www.suse.com/security/cve/CVE-2018-2771/ SUSE CVE CVE-2018-2771 page https://www.suse.com/security/cve/CVE-2018-2777/ SUSE CVE CVE-2018-2777 page https://www.suse.com/security/cve/CVE-2018-2781/ SUSE CVE CVE-2018-2781 page https://www.suse.com/security/cve/CVE-2018-2782/ SUSE CVE CVE-2018-2782 page https://www.suse.com/security/cve/CVE-2018-2784/ SUSE CVE CVE-2018-2784 page https://www.suse.com/security/cve/CVE-2018-2786/ SUSE CVE CVE-2018-2786 page https://www.suse.com/security/cve/CVE-2018-2787/ SUSE CVE CVE-2018-2787 page https://www.suse.com/security/cve/CVE-2018-2810/ SUSE CVE CVE-2018-2810 page https://www.suse.com/security/cve/CVE-2018-2813/ SUSE CVE CVE-2018-2813 page https://www.suse.com/security/cve/CVE-2018-2817/ SUSE CVE CVE-2018-2817 page https://www.suse.com/security/cve/CVE-2018-2819/ SUSE CVE CVE-2018-2819 page HPE Helion OpenStack 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 libmariadb3-3.0.3-3.3.1 mariadb-10.2.15-4.3.1 mariadb-client-10.2.15-4.3.1 mariadb-errormessages-10.2.15-4.3.1 mariadb-galera-10.2.15-4.3.1 mariadb-tools-10.2.15-4.3.1 xtrabackup-2.4.10-4.3.1 libmariadb3-3.0.3-3.3.1 as a component of HPE Helion OpenStack 8 mariadb-10.2.15-4.3.1 as a component of HPE Helion OpenStack 8 mariadb-client-10.2.15-4.3.1 as a component of HPE Helion OpenStack 8 mariadb-errormessages-10.2.15-4.3.1 as a component of HPE Helion OpenStack 8 mariadb-galera-10.2.15-4.3.1 as a component of HPE Helion OpenStack 8 mariadb-tools-10.2.15-4.3.1 as a component of HPE Helion OpenStack 8 xtrabackup-2.4.10-4.3.1 as a component of HPE Helion OpenStack 8 libmariadb3-3.0.3-3.3.1 as a component of SUSE OpenStack Cloud 8 mariadb-10.2.15-4.3.1 as a component of SUSE OpenStack Cloud 8 mariadb-client-10.2.15-4.3.1 as a component of SUSE OpenStack Cloud 8 mariadb-errormessages-10.2.15-4.3.1 as a component of SUSE OpenStack Cloud 8 mariadb-galera-10.2.15-4.3.1 as a component of SUSE OpenStack Cloud 8 mariadb-tools-10.2.15-4.3.1 as a component of SUSE OpenStack Cloud 8 xtrabackup-2.4.10-4.3.1 as a component of SUSE OpenStack Cloud 8 libmariadb3-3.0.3-3.3.1 as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-10.2.15-4.3.1 as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-client-10.2.15-4.3.1 as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-errormessages-10.2.15-4.3.1 as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-galera-10.2.15-4.3.1 as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-tools-10.2.15-4.3.1 as a component of SUSE OpenStack Cloud Crowbar 8 xtrabackup-2.4.10-4.3.1 as a component of SUSE OpenStack Cloud Crowbar 8 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-2755 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2755.html CVE-2018-2755 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2759 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2759.html CVE-2018-2759 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2761 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2761.html CVE-2018-2761 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2766 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2766.html CVE-2018-2766 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N). CVE-2018-2767 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2767.html CVE-2018-2767 https://bugzilla.suse.com/1088681 SUSE Bug 1088681 https://bugzilla.suse.com/1101675 SUSE Bug 1101675 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2771 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2771.html CVE-2018-2771 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2777 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2777.html CVE-2018-2777 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2781 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2781.html CVE-2018-2781 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2782 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2782.html CVE-2018-2782 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2784 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2784.html CVE-2018-2784 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). CVE-2018-2786 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2786.html CVE-2018-2786 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). CVE-2018-2787 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2787.html CVE-2018-2787 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2810 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2810.html CVE-2018-2810 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). CVE-2018-2813 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2813.html CVE-2018-2813 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2817 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2817.html CVE-2018-2817 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2819 HPE Helion OpenStack 8:libmariadb3-3.0.3-3.3.1 HPE Helion OpenStack 8:mariadb-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-client-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-errormessages-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-galera-10.2.15-4.3.1 HPE Helion OpenStack 8:mariadb-tools-10.2.15-4.3.1 HPE Helion OpenStack 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud 8:xtrabackup-2.4.10-4.3.1 SUSE OpenStack Cloud Crowbar 8:libmariadb3-3.0.3-3.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-client-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-galera-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:mariadb-tools-10.2.15-4.3.1 SUSE OpenStack Cloud Crowbar 8:xtrabackup-2.4.10-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181771-1/ https://www.suse.com/security/cve/CVE-2018-2819.html CVE-2018-2819 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518