Security update for mariadb SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2561-1 Final 1 1 2022-07-27T12:18:58Z current 2022-07-27T12:18:58Z 2022-07-27T12:18:58Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mariadb This update for mariadb fixes the following issues: - Added mariadb-galera (jsc#SLE-22245) Update to 10.6.8 (bsc#1199928): - CVE-2021-46669 (bsc#1199928) - CVE-2022-27376 (bsc#1198628) - CVE-2022-27377 (bsc#1198603) - CVE-2022-27378 (bsc#1198604) - CVE-2022-27379 (bsc#1198605) - CVE-2022-27380 (bsc#1198606) - CVE-2022-27381 (bsc#1198607) - CVE-2022-27382 (bsc#1198609) - CVE-2022-27383 (bsc#1198610) - CVE-2022-27384 (bsc#1198611) - CVE-2022-27386 (bsc#1198612) - CVE-2022-27387 (bsc#1198613) - CVE-2022-27444 (bsc#1198634) - CVE-2022-27445 (bsc#1198629) - CVE-2022-27446 (bsc#1198630) - CVE-2022-27447 (bsc#1198631) - CVE-2022-27448 (bsc#1198632) - CVE-2022-27449 (bsc#1198633) - CVE-2022-27451 (bsc#1198639) - CVE-2022-27452 (bsc#1198640) - CVE-2022-27455 (bsc#1198638) - CVE-2022-27456 (bsc#1198635) - CVE-2022-27457 (bsc#1198636) - CVE-2022-27458 (bsc#1198637) - The following issue is not affecting this package: CVE-2022-21427 Update to 10.6.7 (bsc#1196016): - CVE-2021-46665, CVE-2021-46664, CVE-2021-46661, CVE-2021-46668, CVE-2021-46663 Update to 10.6.6: - CVE-2022-24052, CVE-2022-24051, CVE-2022-24050, CVE-2022-24048, CVE-2021-46659 (bsc#1195339) The following issues have been fixed already but didn't have CVE references: - CVE-2021-46658 (bsc#1195334) - CVE-2021-46657 (bsc#1195325) Non security fixes: - Skip failing tests for s390x, fixes bsc#1195076 External refernences: - https://mariadb.com/kb/en/library/mariadb-1068-release-notes - https://mariadb.com/kb/en/library/mariadb-1068-changelog - https://mariadb.com/kb/en/library/mariadb-1067-release-notes - https://mariadb.com/kb/en/library/mariadb-1067-changelog - https://mariadb.com/kb/en/library/mariadb-1066-release-notes - https://mariadb.com/kb/en/library/mariadb-1066-changelog The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/rmt-mariadb-client:latest-2022-2561,Container suse/rmt-mariadb:latest-2022-2561,SUSE-2022-2561,SUSE-SLE-Module-Server-Applications-15-SP4-2022-2561,openSUSE-SLE-15.4-2022-2561 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ Link for SUSE-SU-2022:2561-1 https://lists.suse.com/pipermail/sle-security-updates/2022-July/011679.html E-Mail link for SUSE-SU-2022:2561-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1195076 SUSE Bug 1195076 https://bugzilla.suse.com/1195325 SUSE Bug 1195325 https://bugzilla.suse.com/1195334 SUSE Bug 1195334 https://bugzilla.suse.com/1195339 SUSE Bug 1195339 https://bugzilla.suse.com/1196016 SUSE Bug 1196016 https://bugzilla.suse.com/1198603 SUSE Bug 1198603 https://bugzilla.suse.com/1198604 SUSE Bug 1198604 https://bugzilla.suse.com/1198605 SUSE Bug 1198605 https://bugzilla.suse.com/1198606 SUSE Bug 1198606 https://bugzilla.suse.com/1198607 SUSE Bug 1198607 https://bugzilla.suse.com/1198609 SUSE Bug 1198609 https://bugzilla.suse.com/1198610 SUSE Bug 1198610 https://bugzilla.suse.com/1198611 SUSE Bug 1198611 https://bugzilla.suse.com/1198612 SUSE Bug 1198612 https://bugzilla.suse.com/1198613 SUSE Bug 1198613 https://bugzilla.suse.com/1198628 SUSE Bug 1198628 https://bugzilla.suse.com/1198629 SUSE Bug 1198629 https://bugzilla.suse.com/1198630 SUSE Bug 1198630 https://bugzilla.suse.com/1198631 SUSE Bug 1198631 https://bugzilla.suse.com/1198632 SUSE Bug 1198632 https://bugzilla.suse.com/1198633 SUSE Bug 1198633 https://bugzilla.suse.com/1198634 SUSE Bug 1198634 https://bugzilla.suse.com/1198635 SUSE Bug 1198635 https://bugzilla.suse.com/1198636 SUSE Bug 1198636 https://bugzilla.suse.com/1198637 SUSE Bug 1198637 https://bugzilla.suse.com/1198638 SUSE Bug 1198638 https://bugzilla.suse.com/1198639 SUSE Bug 1198639 https://bugzilla.suse.com/1198640 SUSE Bug 1198640 https://bugzilla.suse.com/1199928 SUSE Bug 1199928 https://www.suse.com/security/cve/CVE-2021-46657/ SUSE CVE CVE-2021-46657 page https://www.suse.com/security/cve/CVE-2021-46658/ SUSE CVE CVE-2021-46658 page https://www.suse.com/security/cve/CVE-2021-46659/ SUSE CVE CVE-2021-46659 page https://www.suse.com/security/cve/CVE-2021-46661/ SUSE CVE CVE-2021-46661 page https://www.suse.com/security/cve/CVE-2021-46663/ SUSE CVE CVE-2021-46663 page https://www.suse.com/security/cve/CVE-2021-46664/ SUSE CVE CVE-2021-46664 page https://www.suse.com/security/cve/CVE-2021-46665/ SUSE CVE CVE-2021-46665 page https://www.suse.com/security/cve/CVE-2021-46668/ SUSE CVE CVE-2021-46668 page https://www.suse.com/security/cve/CVE-2021-46669/ SUSE CVE CVE-2021-46669 page https://www.suse.com/security/cve/CVE-2022-24048/ SUSE CVE CVE-2022-24048 page https://www.suse.com/security/cve/CVE-2022-24050/ SUSE CVE CVE-2022-24050 page https://www.suse.com/security/cve/CVE-2022-24051/ SUSE CVE CVE-2022-24051 page https://www.suse.com/security/cve/CVE-2022-24052/ SUSE CVE CVE-2022-24052 page https://www.suse.com/security/cve/CVE-2022-27376/ SUSE CVE CVE-2022-27376 page https://www.suse.com/security/cve/CVE-2022-27377/ SUSE CVE CVE-2022-27377 page https://www.suse.com/security/cve/CVE-2022-27378/ SUSE CVE CVE-2022-27378 page https://www.suse.com/security/cve/CVE-2022-27379/ SUSE CVE CVE-2022-27379 page https://www.suse.com/security/cve/CVE-2022-27380/ SUSE CVE CVE-2022-27380 page https://www.suse.com/security/cve/CVE-2022-27381/ SUSE CVE CVE-2022-27381 page https://www.suse.com/security/cve/CVE-2022-27382/ SUSE CVE CVE-2022-27382 page https://www.suse.com/security/cve/CVE-2022-27383/ SUSE CVE CVE-2022-27383 page https://www.suse.com/security/cve/CVE-2022-27384/ SUSE CVE CVE-2022-27384 page https://www.suse.com/security/cve/CVE-2022-27386/ SUSE CVE CVE-2022-27386 page https://www.suse.com/security/cve/CVE-2022-27387/ SUSE CVE CVE-2022-27387 page https://www.suse.com/security/cve/CVE-2022-27444/ SUSE CVE CVE-2022-27444 page https://www.suse.com/security/cve/CVE-2022-27445/ SUSE CVE CVE-2022-27445 page https://www.suse.com/security/cve/CVE-2022-27446/ SUSE CVE CVE-2022-27446 page https://www.suse.com/security/cve/CVE-2022-27447/ SUSE CVE CVE-2022-27447 page https://www.suse.com/security/cve/CVE-2022-27448/ SUSE CVE CVE-2022-27448 page https://www.suse.com/security/cve/CVE-2022-27449/ SUSE CVE CVE-2022-27449 page https://www.suse.com/security/cve/CVE-2022-27451/ SUSE CVE CVE-2022-27451 page https://www.suse.com/security/cve/CVE-2022-27452/ SUSE CVE CVE-2022-27452 page https://www.suse.com/security/cve/CVE-2022-27455/ SUSE CVE CVE-2022-27455 page https://www.suse.com/security/cve/CVE-2022-27456/ SUSE CVE CVE-2022-27456 page https://www.suse.com/security/cve/CVE-2022-27457/ SUSE CVE CVE-2022-27457 page https://www.suse.com/security/cve/CVE-2022-27458/ SUSE CVE CVE-2022-27458 page Container suse/rmt-mariadb-client:latest Container suse/rmt-mariadb:latest SUSE Linux Enterprise Module for Server Applications 15 SP4 openSUSE Leap 15.4 mariadb-client-10.6.8-150400.3.7.1 mariadb-errormessages-10.6.8-150400.3.7.1 mariadb-10.6.8-150400.3.7.1 mariadb-tools-10.6.8-150400.3.7.1 libmariadbd-devel-10.6.8-150400.3.7.1 libmariadbd19-10.6.8-150400.3.7.1 mariadb-bench-10.6.8-150400.3.7.1 mariadb-galera-10.6.8-150400.3.7.1 mariadb-rpm-macros-10.6.8-150400.3.7.1 mariadb-test-10.6.8-150400.3.7.1 mariadb-client-10.6.8-150400.3.7.1 as a component of Container suse/rmt-mariadb-client:latest mariadb-errormessages-10.6.8-150400.3.7.1 as a component of Container suse/rmt-mariadb-client:latest mariadb-10.6.8-150400.3.7.1 as a component of Container suse/rmt-mariadb:latest mariadb-client-10.6.8-150400.3.7.1 as a component of Container suse/rmt-mariadb:latest mariadb-errormessages-10.6.8-150400.3.7.1 as a component of Container suse/rmt-mariadb:latest mariadb-tools-10.6.8-150400.3.7.1 as a component of Container suse/rmt-mariadb:latest libmariadbd-devel-10.6.8-150400.3.7.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libmariadbd19-10.6.8-150400.3.7.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 mariadb-10.6.8-150400.3.7.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 mariadb-client-10.6.8-150400.3.7.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 mariadb-errormessages-10.6.8-150400.3.7.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 mariadb-tools-10.6.8-150400.3.7.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libmariadbd-devel-10.6.8-150400.3.7.1 as a component of openSUSE Leap 15.4 libmariadbd19-10.6.8-150400.3.7.1 as a component of openSUSE Leap 15.4 mariadb-10.6.8-150400.3.7.1 as a component of openSUSE Leap 15.4 mariadb-bench-10.6.8-150400.3.7.1 as a component of openSUSE Leap 15.4 mariadb-client-10.6.8-150400.3.7.1 as a component of openSUSE Leap 15.4 mariadb-errormessages-10.6.8-150400.3.7.1 as a component of openSUSE Leap 15.4 mariadb-galera-10.6.8-150400.3.7.1 as a component of openSUSE Leap 15.4 mariadb-rpm-macros-10.6.8-150400.3.7.1 as a component of openSUSE Leap 15.4 mariadb-test-10.6.8-150400.3.7.1 as a component of openSUSE Leap 15.4 mariadb-tools-10.6.8-150400.3.7.1 as a component of openSUSE Leap 15.4 get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2021-46657.html CVE-2021-46657 https://bugzilla.suse.com/1195325 SUSE Bug 1195325 https://bugzilla.suse.com/1199955 SUSE Bug 1199955 save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery. CVE-2021-46658 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2021-46658.html CVE-2021-46658 https://bugzilla.suse.com/1195334 SUSE Bug 1195334 MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW. CVE-2021-46659 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2021-46659.html CVE-2021-46659 https://bugzilla.suse.com/1195339 SUSE Bug 1195339 MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE). CVE-2021-46661 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2021-46661.html CVE-2021-46661 https://bugzilla.suse.com/1196016 SUSE Bug 1196016 MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements. CVE-2021-46663 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2021-46663.html CVE-2021-46663 https://bugzilla.suse.com/1196016 SUSE Bug 1196016 MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr. CVE-2021-46664 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2021-46664.html CVE-2021-46664 https://bugzilla.suse.com/1196016 SUSE Bug 1196016 MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations. CVE-2021-46665 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2021-46665.html CVE-2021-46665 https://bugzilla.suse.com/1196016 SUSE Bug 1196016 MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures. CVE-2021-46668 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2021-46668.html CVE-2021-46668 https://bugzilla.suse.com/1196016 SUSE Bug 1196016 MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used. CVE-2021-46669 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2021-46669.html CVE-2021-46669 MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191. CVE-2022-24048 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-24048.html CVE-2022-24048 https://bugzilla.suse.com/1196016 SUSE Bug 1196016 MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207. CVE-2022-24050 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-24050.html CVE-2022-24050 https://bugzilla.suse.com/1196016 SUSE Bug 1196016 MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193. CVE-2022-24051 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-24051.html CVE-2022-24051 https://bugzilla.suse.com/1196016 SUSE Bug 1196016 MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190. CVE-2022-24052 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-24052.html CVE-2022-24052 https://bugzilla.suse.com/1196016 SUSE Bug 1196016 MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements. CVE-2022-27376 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27376.html CVE-2022-27376 https://bugzilla.suse.com/1198628 SUSE Bug 1198628 MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements. CVE-2022-27377 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27377.html CVE-2022-27377 https://bugzilla.suse.com/1198603 SUSE Bug 1198603 An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27378 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27378.html CVE-2022-27378 https://bugzilla.suse.com/1198604 SUSE Bug 1198604 An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27379 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27379.html CVE-2022-27379 https://bugzilla.suse.com/1198605 SUSE Bug 1198605 An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27380 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27380.html CVE-2022-27380 https://bugzilla.suse.com/1198606 SUSE Bug 1198606 An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27381 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27381.html CVE-2022-27381 https://bugzilla.suse.com/1198607 SUSE Bug 1198607 MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order. CVE-2022-27382 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27382.html CVE-2022-27382 https://bugzilla.suse.com/1198609 SUSE Bug 1198609 MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements. CVE-2022-27383 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27383.html CVE-2022-27383 https://bugzilla.suse.com/1198610 SUSE Bug 1198610 An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27384 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27384.html CVE-2022-27384 https://bugzilla.suse.com/1198611 SUSE Bug 1198611 MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc. CVE-2022-27386 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27386.html CVE-2022-27386 https://bugzilla.suse.com/1198612 SUSE Bug 1198612 MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements. CVE-2022-27387 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27387.html CVE-2022-27387 https://bugzilla.suse.com/1198613 SUSE Bug 1198613 MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc. CVE-2022-27444 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27444.html CVE-2022-27444 https://bugzilla.suse.com/1198634 SUSE Bug 1198634 MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc. CVE-2022-27445 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27445.html CVE-2022-27445 https://bugzilla.suse.com/1198629 SUSE Bug 1198629 MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h. CVE-2022-27446 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27446.html CVE-2022-27446 https://bugzilla.suse.com/1198630 SUSE Bug 1198630 https://bugzilla.suse.com/198630 SUSE Bug 198630 MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h. CVE-2022-27447 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27447.html CVE-2022-27447 https://bugzilla.suse.com/1198631 SUSE Bug 1198631 There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc. CVE-2022-27448 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27448.html CVE-2022-27448 https://bugzilla.suse.com/1198632 SUSE Bug 1198632 MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148. CVE-2022-27449 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27449.html CVE-2022-27449 https://bugzilla.suse.com/1198633 SUSE Bug 1198633 MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc. CVE-2022-27451 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27451.html CVE-2022-27451 https://bugzilla.suse.com/1198639 SUSE Bug 1198639 MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc. CVE-2022-27452 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27452.html CVE-2022-27452 https://bugzilla.suse.com/1198640 SUSE Bug 1198640 MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c. CVE-2022-27455 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27455.html CVE-2022-27455 https://bugzilla.suse.com/1198638 SUSE Bug 1198638 MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc. CVE-2022-27456 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27456.html CVE-2022-27456 https://bugzilla.suse.com/1198635 SUSE Bug 1198635 MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c. CVE-2022-27457 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27457.html CVE-2022-27457 https://bugzilla.suse.com/1198636 SUSE Bug 1198636 MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h. CVE-2022-27458 Container suse/rmt-mariadb-client:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb-client:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-client-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-errormessages-10.6.8-150400.3.7.1 Container suse/rmt-mariadb:latest:mariadb-tools-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd-devel-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libmariadbd19-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-client-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-errormessages-10.6.8-150400.3.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:mariadb-tools-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd-devel-10.6.8-150400.3.7.1 openSUSE Leap 15.4:libmariadbd19-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-bench-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-client-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-errormessages-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-galera-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-rpm-macros-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-test-10.6.8-150400.3.7.1 openSUSE Leap 15.4:mariadb-tools-10.6.8-150400.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/ https://www.suse.com/security/cve/CVE-2022-27458.html CVE-2022-27458 https://bugzilla.suse.com/1198637 SUSE Bug 1198637