Security update for mariadb SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:3497-1 Final 1 1 2020-11-24T09:15:07Z current 2020-11-24T09:15:07Z 2020-11-24T09:15:07Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mariadb This update for mariadb and mariadb-connector-c fixes the following issues: - Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428] fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15180 - Update mariadb-connector-c to 3.1.11 [bsc#1177472 and bsc#1178428] The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-3497,SUSE-OpenStack-Cloud-9-2020-3497,SUSE-OpenStack-Cloud-Crowbar-9-2020-3497,SUSE-SLE-SAP-12-SP4-2020-3497,SUSE-SLE-SERVER-12-SP4-LTSS-2020-3497,SUSE-SLE-SERVER-12-SP5-2020-3497 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20203497-1/ Link for SUSE-SU-2020:3497-1 https://lists.suse.com/pipermail/sle-security-updates/2020-November/007843.html E-Mail link for SUSE-SU-2020:3497-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1172399 SUSE Bug 1172399 https://bugzilla.suse.com/1175596 SUSE Bug 1175596 https://bugzilla.suse.com/1177472 SUSE Bug 1177472 https://bugzilla.suse.com/1178428 SUSE Bug 1178428 https://www.suse.com/security/cve/CVE-2020-14765/ SUSE CVE CVE-2020-14765 page https://www.suse.com/security/cve/CVE-2020-14776/ SUSE CVE CVE-2020-14776 page https://www.suse.com/security/cve/CVE-2020-14789/ SUSE CVE CVE-2020-14789 page https://www.suse.com/security/cve/CVE-2020-14812/ SUSE CVE CVE-2020-14812 page https://www.suse.com/security/cve/CVE-2020-15180/ SUSE CVE CVE-2020-15180 page SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 libmariadb-devel-3.1.11-2.19.1 libmariadb3-3.1.11-2.19.1 libmariadb3-32bit-3.1.11-2.19.1 libmariadb3-64bit-3.1.11-2.19.1 libmariadb_plugins-3.1.11-2.19.1 libmariadbprivate-3.1.11-2.19.1 libmysqld-devel-10.2.36-3.33.1 libmysqld19-10.2.36-3.33.1 mariadb-10.2.36-3.33.1 mariadb-bench-10.2.36-3.33.1 mariadb-client-10.2.36-3.33.1 mariadb-errormessages-10.2.36-3.33.1 mariadb-galera-10.2.36-3.33.1 mariadb-test-10.2.36-3.33.1 mariadb-tools-10.2.36-3.33.1 libmariadb3-3.1.11-2.19.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libmariadb_plugins-3.1.11-2.19.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mariadb-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mariadb-client-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mariadb-errormessages-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mariadb-tools-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libmariadb3-3.1.11-2.19.1 as a component of SUSE Linux Enterprise Server 12 SP5 libmariadb_plugins-3.1.11-2.19.1 as a component of SUSE Linux Enterprise Server 12 SP5 mariadb-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 mariadb-client-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 mariadb-errormessages-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 mariadb-tools-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server 12 SP5 libmariadb3-3.1.11-2.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libmariadb_plugins-3.1.11-2.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-client-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-errormessages-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-tools-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libmariadb3-3.1.11-2.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libmariadb_plugins-3.1.11-2.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 mariadb-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 mariadb-client-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 mariadb-errormessages-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 mariadb-tools-10.2.36-3.33.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libmariadb3-3.1.11-2.19.1 as a component of SUSE OpenStack Cloud 9 libmariadb_plugins-3.1.11-2.19.1 as a component of SUSE OpenStack Cloud 9 mariadb-10.2.36-3.33.1 as a component of SUSE OpenStack Cloud 9 mariadb-client-10.2.36-3.33.1 as a component of SUSE OpenStack Cloud 9 mariadb-errormessages-10.2.36-3.33.1 as a component of SUSE OpenStack Cloud 9 mariadb-galera-10.2.36-3.33.1 as a component of SUSE OpenStack Cloud 9 mariadb-tools-10.2.36-3.33.1 as a component of SUSE OpenStack Cloud 9 libmariadb3-3.1.11-2.19.1 as a component of SUSE OpenStack Cloud Crowbar 9 libmariadb_plugins-3.1.11-2.19.1 as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-10.2.36-3.33.1 as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-client-10.2.36-3.33.1 as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-errormessages-10.2.36-3.33.1 as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-galera-10.2.36-3.33.1 as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-tools-10.2.36-3.33.1 as a component of SUSE OpenStack Cloud Crowbar 9 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2020-14765 SUSE Linux Enterprise Server 12 SP4-LTSS:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP5:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.36-3.33.1 SUSE OpenStack Cloud 9:libmariadb3-3.1.11-2.19.1 SUSE OpenStack Cloud 9:libmariadb_plugins-3.1.11-2.19.1 SUSE OpenStack Cloud 9:mariadb-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:libmariadb3-3.1.11-2.19.1 SUSE OpenStack Cloud Crowbar 9:libmariadb_plugins-3.1.11-2.19.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.36-3.33.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203497-1/ https://www.suse.com/security/cve/CVE-2020-14765.html CVE-2020-14765 https://bugzilla.suse.com/1178428 SUSE Bug 1178428 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2020-14776 SUSE Linux Enterprise Server 12 SP4-LTSS:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP5:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.36-3.33.1 SUSE OpenStack Cloud 9:libmariadb3-3.1.11-2.19.1 SUSE OpenStack Cloud 9:libmariadb_plugins-3.1.11-2.19.1 SUSE OpenStack Cloud 9:mariadb-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:libmariadb3-3.1.11-2.19.1 SUSE OpenStack Cloud Crowbar 9:libmariadb_plugins-3.1.11-2.19.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.36-3.33.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203497-1/ https://www.suse.com/security/cve/CVE-2020-14776.html CVE-2020-14776 https://bugzilla.suse.com/1178428 SUSE Bug 1178428 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2020-14789 SUSE Linux Enterprise Server 12 SP4-LTSS:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP5:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.36-3.33.1 SUSE OpenStack Cloud 9:libmariadb3-3.1.11-2.19.1 SUSE OpenStack Cloud 9:libmariadb_plugins-3.1.11-2.19.1 SUSE OpenStack Cloud 9:mariadb-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:libmariadb3-3.1.11-2.19.1 SUSE OpenStack Cloud Crowbar 9:libmariadb_plugins-3.1.11-2.19.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.36-3.33.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203497-1/ https://www.suse.com/security/cve/CVE-2020-14789.html CVE-2020-14789 https://bugzilla.suse.com/1178428 SUSE Bug 1178428 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2020-14812 SUSE Linux Enterprise Server 12 SP4-LTSS:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP5:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.36-3.33.1 SUSE OpenStack Cloud 9:libmariadb3-3.1.11-2.19.1 SUSE OpenStack Cloud 9:libmariadb_plugins-3.1.11-2.19.1 SUSE OpenStack Cloud 9:mariadb-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:libmariadb3-3.1.11-2.19.1 SUSE OpenStack Cloud Crowbar 9:libmariadb_plugins-3.1.11-2.19.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.36-3.33.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203497-1/ https://www.suse.com/security/cve/CVE-2020-14812.html CVE-2020-14812 https://bugzilla.suse.com/1178428 SUSE Bug 1178428 A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6. CVE-2020-15180 SUSE Linux Enterprise Server 12 SP4-LTSS:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP5:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmariadb3-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmariadb_plugins-3.1.11-2.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.36-3.33.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.36-3.33.1 SUSE OpenStack Cloud 9:libmariadb3-3.1.11-2.19.1 SUSE OpenStack Cloud 9:libmariadb_plugins-3.1.11-2.19.1 SUSE OpenStack Cloud 9:mariadb-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.36-3.33.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:libmariadb3-3.1.11-2.19.1 SUSE OpenStack Cloud Crowbar 9:libmariadb_plugins-3.1.11-2.19.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.36-3.33.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.36-3.33.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203497-1/ https://www.suse.com/security/cve/CVE-2020-15180.html CVE-2020-15180 https://bugzilla.suse.com/1177472 SUSE Bug 1177472