Security update for mariadb SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2160-1 Final 1 1 2022-06-23T08:10:09Z current 2022-06-23T08:10:09Z 2022-06-23T08:10:09Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mariadb This update for mariadb fixes the following issues: - CVE-2021-46669 (bsc#1199928) - CVE-2022-21427 (bsc#1199928) - CVE-2022-27377 (bsc#1198603) - CVE-2022-27378 (bsc#1198604) - CVE-2022-27380 (bsc#1198606) - CVE-2022-27381 (bsc#1198607) - CVE-2022-27383 (bsc#1198610) - CVE-2022-27384 (bsc#1198611) - CVE-2022-27386 (bsc#1198612) - CVE-2022-27387 (bsc#1198613) - CVE-2022-27445 (bsc#1198629) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-2160,SUSE-OpenStack-Cloud-9-2022-2160,SUSE-OpenStack-Cloud-Crowbar-9-2022-2160,SUSE-SLE-SAP-12-SP4-2022-2160,SUSE-SLE-SERVER-12-SP4-LTSS-2022-2160,SUSE-SLE-SERVER-12-SP5-2022-2160 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ Link for SUSE-SU-2022:2160-1 https://lists.suse.com/pipermail/sle-security-updates/2022-June/011337.html E-Mail link for SUSE-SU-2022:2160-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1198603 SUSE Bug 1198603 https://bugzilla.suse.com/1198604 SUSE Bug 1198604 https://bugzilla.suse.com/1198606 SUSE Bug 1198606 https://bugzilla.suse.com/1198607 SUSE Bug 1198607 https://bugzilla.suse.com/1198610 SUSE Bug 1198610 https://bugzilla.suse.com/1198611 SUSE Bug 1198611 https://bugzilla.suse.com/1198612 SUSE Bug 1198612 https://bugzilla.suse.com/1198613 SUSE Bug 1198613 https://bugzilla.suse.com/1198629 SUSE Bug 1198629 https://bugzilla.suse.com/1199928 SUSE Bug 1199928 https://www.suse.com/security/cve/CVE-2021-46669/ SUSE CVE CVE-2021-46669 page https://www.suse.com/security/cve/CVE-2022-21427/ SUSE CVE CVE-2022-21427 page https://www.suse.com/security/cve/CVE-2022-27377/ SUSE CVE CVE-2022-27377 page https://www.suse.com/security/cve/CVE-2022-27378/ SUSE CVE CVE-2022-27378 page https://www.suse.com/security/cve/CVE-2022-27380/ SUSE CVE CVE-2022-27380 page https://www.suse.com/security/cve/CVE-2022-27381/ SUSE CVE CVE-2022-27381 page https://www.suse.com/security/cve/CVE-2022-27383/ SUSE CVE CVE-2022-27383 page https://www.suse.com/security/cve/CVE-2022-27384/ SUSE CVE CVE-2022-27384 page https://www.suse.com/security/cve/CVE-2022-27386/ SUSE CVE CVE-2022-27386 page https://www.suse.com/security/cve/CVE-2022-27387/ SUSE CVE CVE-2022-27387 page https://www.suse.com/security/cve/CVE-2022-27445/ SUSE CVE CVE-2022-27445 page SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 libmysqld-devel-10.2.44-3.50.1 libmysqld19-10.2.44-3.50.1 mariadb-10.2.44-3.50.1 mariadb-bench-10.2.44-3.50.1 mariadb-client-10.2.44-3.50.1 mariadb-errormessages-10.2.44-3.50.1 mariadb-galera-10.2.44-3.50.1 mariadb-test-10.2.44-3.50.1 mariadb-tools-10.2.44-3.50.1 mariadb-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mariadb-client-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mariadb-errormessages-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mariadb-tools-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mariadb-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 mariadb-client-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 mariadb-errormessages-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 mariadb-tools-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server 12 SP5 mariadb-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-client-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-errormessages-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-tools-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 mariadb-client-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 mariadb-errormessages-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 mariadb-tools-10.2.44-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 mariadb-10.2.44-3.50.1 as a component of SUSE OpenStack Cloud 9 mariadb-client-10.2.44-3.50.1 as a component of SUSE OpenStack Cloud 9 mariadb-errormessages-10.2.44-3.50.1 as a component of SUSE OpenStack Cloud 9 mariadb-galera-10.2.44-3.50.1 as a component of SUSE OpenStack Cloud 9 mariadb-tools-10.2.44-3.50.1 as a component of SUSE OpenStack Cloud 9 mariadb-10.2.44-3.50.1 as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-client-10.2.44-3.50.1 as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-errormessages-10.2.44-3.50.1 as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-galera-10.2.44-3.50.1 as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-tools-10.2.44-3.50.1 as a component of SUSE OpenStack Cloud Crowbar 9 MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used. CVE-2021-46669 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2021-46669.html CVE-2021-46669 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2022-21427 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2022-21427.html CVE-2022-21427 https://bugzilla.suse.com/1198685 SUSE Bug 1198685 MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements. CVE-2022-27377 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2022-27377.html CVE-2022-27377 https://bugzilla.suse.com/1198603 SUSE Bug 1198603 An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27378 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2022-27378.html CVE-2022-27378 https://bugzilla.suse.com/1198604 SUSE Bug 1198604 An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27380 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2022-27380.html CVE-2022-27380 https://bugzilla.suse.com/1198606 SUSE Bug 1198606 An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27381 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2022-27381.html CVE-2022-27381 https://bugzilla.suse.com/1198607 SUSE Bug 1198607 MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements. CVE-2022-27383 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2022-27383.html CVE-2022-27383 https://bugzilla.suse.com/1198610 SUSE Bug 1198610 An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27384 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2022-27384.html CVE-2022-27384 https://bugzilla.suse.com/1198611 SUSE Bug 1198611 MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc. CVE-2022-27386 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2022-27386.html CVE-2022-27386 https://bugzilla.suse.com/1198612 SUSE Bug 1198612 MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements. CVE-2022-27387 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2022-27387.html CVE-2022-27387 https://bugzilla.suse.com/1198613 SUSE Bug 1198613 MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc. CVE-2022-27445 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-tools-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-client-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-errormessages-10.2.44-3.50.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud 9:mariadb-tools-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-client-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-errormessages-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-galera-10.2.44-3.50.1 SUSE OpenStack Cloud Crowbar 9:mariadb-tools-10.2.44-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222160-1/ https://www.suse.com/security/cve/CVE-2022-27445.html CVE-2022-27445 https://bugzilla.suse.com/1198629 SUSE Bug 1198629