Security update for mariadb SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:3500-1 Final 1 1 2020-11-24T12:50:44Z current 2020-11-24T12:50:44Z 2020-11-24T12:50:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mariadb This update for mariadb and mariadb-connector-c fixes the following issues: - Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428] fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15180 - Update mariadb-connector-c to 3.1.11 [bsc#1177472 and bsc#1178428] The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/rmt-mariadb-client:latest-2020-3500,Container suse/rmt-mariadb:latest-2020-3500,Container suse/rmt-server:latest-2020-3500,SUSE-2020-3500,SUSE-SLE-Module-Basesystem-15-SP1-2020-3500,SUSE-SLE-Module-Basesystem-15-SP2-2020-3500,SUSE-SLE-Module-Server-Applications-15-SP1-2020-3500,SUSE-SLE-Module-Server-Applications-15-SP2-2020-3500,SUSE-SLE-Product-HPC-15-2020-3500,SUSE-SLE-Product-SLES-15-2020-3500,SUSE-SLE-Product-SLES_SAP-15-2020-3500 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20203500-1/ Link for SUSE-SU-2020:3500-1 https://lists.suse.com/pipermail/sle-security-updates/2020-November/007844.html E-Mail link for SUSE-SU-2020:3500-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1175596 SUSE Bug 1175596 https://bugzilla.suse.com/1177472 SUSE Bug 1177472 https://bugzilla.suse.com/1178428 SUSE Bug 1178428 https://www.suse.com/security/cve/CVE-2020-14765/ SUSE CVE CVE-2020-14765 page https://www.suse.com/security/cve/CVE-2020-14776/ SUSE CVE CVE-2020-14776 page https://www.suse.com/security/cve/CVE-2020-14789/ SUSE CVE CVE-2020-14789 page https://www.suse.com/security/cve/CVE-2020-14812/ SUSE CVE CVE-2020-14812 page https://www.suse.com/security/cve/CVE-2020-15180/ SUSE CVE CVE-2020-15180 page Container suse/rmt-mariadb-client:latest Container suse/rmt-mariadb:latest Container suse/rmt-server:latest SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 libmariadb3-3.1.11-3.22.2 libmariadb-devel-3.1.11-3.22.2 libmariadb3-32bit-3.1.11-3.22.2 libmariadb3-64bit-3.1.11-3.22.2 libmariadb_plugins-3.1.11-3.22.2 libmariadbprivate-3.1.11-3.22.2 libmysqld-devel-10.2.36-3.34.4 libmysqld19-10.2.36-3.34.4 mariadb-10.2.36-3.34.4 mariadb-bench-10.2.36-3.34.4 mariadb-client-10.2.36-3.34.4 mariadb-errormessages-10.2.36-3.34.4 mariadb-galera-10.2.36-3.34.4 mariadb-test-10.2.36-3.34.4 mariadb-tools-10.2.36-3.34.4 libmariadb3-3.1.11-3.22.2 as a component of Container suse/rmt-mariadb-client:latest libmariadb3-3.1.11-3.22.2 as a component of Container suse/rmt-mariadb:latest libmariadb3-3.1.11-3.22.2 as a component of Container suse/rmt-server:latest libmariadb-devel-3.1.11-3.22.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libmariadb3-3.1.11-3.22.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libmariadb_plugins-3.1.11-3.22.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libmariadbprivate-3.1.11-3.22.2 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libmysqld-devel-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libmysqld19-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS mariadb-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS mariadb-client-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS mariadb-errormessages-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS mariadb-tools-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libmariadb-devel-3.1.11-3.22.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libmariadb3-3.1.11-3.22.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libmariadb_plugins-3.1.11-3.22.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libmariadbprivate-3.1.11-3.22.2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libmysqld-devel-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libmysqld19-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS mariadb-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS mariadb-client-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS mariadb-errormessages-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS mariadb-tools-10.2.36-3.34.4 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libmariadb3-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libmariadbprivate-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libmariadb3-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libmariadbprivate-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libmariadb-devel-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libmariadb_plugins-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libmysqld-devel-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libmysqld19-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 mariadb-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 mariadb-client-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 mariadb-errormessages-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 mariadb-tools-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libmariadb-devel-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libmariadb_plugins-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libmariadb-devel-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Server 15-LTSS libmariadb3-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Server 15-LTSS libmariadb_plugins-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Server 15-LTSS libmariadbprivate-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Server 15-LTSS libmysqld-devel-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server 15-LTSS libmysqld19-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server 15-LTSS mariadb-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server 15-LTSS mariadb-client-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server 15-LTSS mariadb-errormessages-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server 15-LTSS mariadb-tools-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server 15-LTSS libmariadb-devel-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libmariadb3-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libmariadb_plugins-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libmariadbprivate-3.1.11-3.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libmysqld-devel-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libmysqld19-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 mariadb-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 mariadb-client-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 mariadb-errormessages-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 mariadb-tools-10.2.36-3.34.4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2020-14765 Container suse/rmt-mariadb-client:latest:libmariadb3-3.1.11-3.22.2 Container suse/rmt-mariadb:latest:libmariadb3-3.1.11-3.22.2 Container suse/rmt-server:latest:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Module for Basesystem 15 SP1:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP2:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-tools-10.2.36-3.34.4 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203500-1/ https://www.suse.com/security/cve/CVE-2020-14765.html CVE-2020-14765 https://bugzilla.suse.com/1178428 SUSE Bug 1178428 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2020-14776 Container suse/rmt-mariadb-client:latest:libmariadb3-3.1.11-3.22.2 Container suse/rmt-mariadb:latest:libmariadb3-3.1.11-3.22.2 Container suse/rmt-server:latest:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Module for Basesystem 15 SP1:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP2:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-tools-10.2.36-3.34.4 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203500-1/ https://www.suse.com/security/cve/CVE-2020-14776.html CVE-2020-14776 https://bugzilla.suse.com/1178428 SUSE Bug 1178428 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2020-14789 Container suse/rmt-mariadb-client:latest:libmariadb3-3.1.11-3.22.2 Container suse/rmt-mariadb:latest:libmariadb3-3.1.11-3.22.2 Container suse/rmt-server:latest:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Module for Basesystem 15 SP1:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP2:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-tools-10.2.36-3.34.4 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203500-1/ https://www.suse.com/security/cve/CVE-2020-14789.html CVE-2020-14789 https://bugzilla.suse.com/1178428 SUSE Bug 1178428 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2020-14812 Container suse/rmt-mariadb-client:latest:libmariadb3-3.1.11-3.22.2 Container suse/rmt-mariadb:latest:libmariadb3-3.1.11-3.22.2 Container suse/rmt-server:latest:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Module for Basesystem 15 SP1:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP2:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-tools-10.2.36-3.34.4 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203500-1/ https://www.suse.com/security/cve/CVE-2020-14812.html CVE-2020-14812 https://bugzilla.suse.com/1178428 SUSE Bug 1178428 A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6. CVE-2020-15180 Container suse/rmt-mariadb-client:latest:libmariadb3-3.1.11-3.22.2 Container suse/rmt-mariadb:latest:libmariadb3-3.1.11-3.22.2 Container suse/rmt-server:latest:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-ESPOS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Module for Basesystem 15 SP1:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP1:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP1:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Module for Server Applications 15 SP2:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Server 15-LTSS:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Server 15-LTSS:mariadb-tools-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb-devel-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb3-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadb_plugins-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmariadbprivate-3.1.11-3.22.2 SUSE Linux Enterprise Server for SAP Applications 15:libmysqld-devel-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:libmysqld19-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-client-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-errormessages-10.2.36-3.34.4 SUSE Linux Enterprise Server for SAP Applications 15:mariadb-tools-10.2.36-3.34.4 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203500-1/ https://www.suse.com/security/cve/CVE-2020-15180.html CVE-2020-15180 https://bugzilla.suse.com/1177472 SUSE Bug 1177472