Security update for mariadb SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:2991-1 Final 1 1 2023-07-26T18:26:23Z current 2023-07-26T18:26:23Z 2023-07-26T18:26:23Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mariadb This update for mariadb fixes the following issues: This update provides MariaDB 10.5.21. See release notes at https://mariadb.com/kb/en/mariadb-10-5-21-release-notes/ and changelog at https://mariadb.com/kb/en/mariadb-10-5-21-changelog/ . Security issues fixed: - CVE-2022-47015: Fixed a NULL pointer dereference in spider_db_mbase:print_warnings (bsc#1207404). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-2991,SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2991,SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2991,SUSE-SLE-Product-RT-15-SP3-2023-2991,SUSE-SLE-Product-SLES-15-SP3-ERICSSON-2023-2991,SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2991,SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2991,SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-2991,SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2991,SUSE-Storage-7.1-2023-2991 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20232991-1/ Link for SUSE-SU-2023:2991-1 https://lists.suse.com/pipermail/sle-security-updates/2023-July/015671.html E-Mail link for SUSE-SU-2023:2991-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1207404 SUSE Bug 1207404 https://www.suse.com/security/cve/CVE-2022-47015/ SUSE CVE CVE-2022-47015 page SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 libmariadbd-devel-10.5.21-150300.3.32.5 libmariadbd19-10.5.21-150300.3.32.5 mariadb-10.5.21-150300.3.32.5 mariadb-bench-10.5.21-150300.3.32.5 mariadb-client-10.5.21-150300.3.32.5 mariadb-errormessages-10.5.21-150300.3.32.5 mariadb-galera-10.5.21-150300.3.32.5 mariadb-rpm-macros-10.5.21-150300.3.32.5 mariadb-test-10.5.21-150300.3.32.5 mariadb-tools-10.5.21-150300.3.32.5 libmariadbd-devel-10.5.21-150300.3.32.5 as a component of SUSE Enterprise Storage 7.1 libmariadbd19-10.5.21-150300.3.32.5 as a component of SUSE Enterprise Storage 7.1 mariadb-10.5.21-150300.3.32.5 as a component of SUSE Enterprise Storage 7.1 mariadb-client-10.5.21-150300.3.32.5 as a component of SUSE Enterprise Storage 7.1 mariadb-errormessages-10.5.21-150300.3.32.5 as a component of SUSE Enterprise Storage 7.1 mariadb-tools-10.5.21-150300.3.32.5 as a component of SUSE Enterprise Storage 7.1 libmariadbd-devel-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libmariadbd19-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS mariadb-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS mariadb-client-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS mariadb-errormessages-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS mariadb-tools-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libmariadbd-devel-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libmariadbd19-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS mariadb-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS mariadb-client-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS mariadb-errormessages-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS mariadb-tools-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libmariadbd-devel-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Real Time 15 SP3 libmariadbd19-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Real Time 15 SP3 mariadb-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Real Time 15 SP3 mariadb-client-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Real Time 15 SP3 mariadb-errormessages-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Real Time 15 SP3 mariadb-tools-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Real Time 15 SP3 libmariadbd-devel-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libmariadbd19-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS mariadb-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS mariadb-client-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS mariadb-errormessages-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS mariadb-tools-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libmariadbd-devel-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libmariadbd19-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 mariadb-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 mariadb-client-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 mariadb-errormessages-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 mariadb-tools-10.5.21-150300.3.32.5 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libmariadbd-devel-10.5.21-150300.3.32.5 as a component of SUSE Manager Proxy 4.2 libmariadbd19-10.5.21-150300.3.32.5 as a component of SUSE Manager Proxy 4.2 mariadb-10.5.21-150300.3.32.5 as a component of SUSE Manager Proxy 4.2 mariadb-client-10.5.21-150300.3.32.5 as a component of SUSE Manager Proxy 4.2 mariadb-errormessages-10.5.21-150300.3.32.5 as a component of SUSE Manager Proxy 4.2 mariadb-tools-10.5.21-150300.3.32.5 as a component of SUSE Manager Proxy 4.2 libmariadbd-devel-10.5.21-150300.3.32.5 as a component of SUSE Manager Server 4.2 libmariadbd19-10.5.21-150300.3.32.5 as a component of SUSE Manager Server 4.2 mariadb-10.5.21-150300.3.32.5 as a component of SUSE Manager Server 4.2 mariadb-client-10.5.21-150300.3.32.5 as a component of SUSE Manager Server 4.2 mariadb-errormessages-10.5.21-150300.3.32.5 as a component of SUSE Manager Server 4.2 mariadb-tools-10.5.21-150300.3.32.5 as a component of SUSE Manager Server 4.2 MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer. CVE-2022-47015 SUSE Enterprise Storage 7.1:libmariadbd-devel-10.5.21-150300.3.32.5 SUSE Enterprise Storage 7.1:libmariadbd19-10.5.21-150300.3.32.5 SUSE Enterprise Storage 7.1:mariadb-10.5.21-150300.3.32.5 SUSE Enterprise Storage 7.1:mariadb-client-10.5.21-150300.3.32.5 SUSE Enterprise Storage 7.1:mariadb-errormessages-10.5.21-150300.3.32.5 SUSE Enterprise Storage 7.1:mariadb-tools-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libmariadbd-devel-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libmariadbd19-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:mariadb-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:mariadb-client-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:mariadb-errormessages-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:mariadb-tools-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libmariadbd-devel-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libmariadbd19-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:mariadb-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:mariadb-client-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:mariadb-errormessages-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:mariadb-tools-10.5.21-150300.3.32.5 SUSE Linux Enterprise Real Time 15 SP3:libmariadbd-devel-10.5.21-150300.3.32.5 SUSE Linux Enterprise Real Time 15 SP3:libmariadbd19-10.5.21-150300.3.32.5 SUSE Linux Enterprise Real Time 15 SP3:mariadb-10.5.21-150300.3.32.5 SUSE Linux Enterprise Real Time 15 SP3:mariadb-client-10.5.21-150300.3.32.5 SUSE Linux Enterprise Real Time 15 SP3:mariadb-errormessages-10.5.21-150300.3.32.5 SUSE Linux Enterprise Real Time 15 SP3:mariadb-tools-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server 15 SP3-LTSS:libmariadbd-devel-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server 15 SP3-LTSS:libmariadbd19-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server 15 SP3-LTSS:mariadb-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server 15 SP3-LTSS:mariadb-client-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server 15 SP3-LTSS:mariadb-errormessages-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server 15 SP3-LTSS:mariadb-tools-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libmariadbd-devel-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libmariadbd19-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server for SAP Applications 15 SP3:mariadb-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server for SAP Applications 15 SP3:mariadb-client-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server for SAP Applications 15 SP3:mariadb-errormessages-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server for SAP Applications 15 SP3:mariadb-tools-10.5.21-150300.3.32.5 SUSE Manager Proxy 4.2:libmariadbd-devel-10.5.21-150300.3.32.5 SUSE Manager Proxy 4.2:libmariadbd19-10.5.21-150300.3.32.5 SUSE Manager Proxy 4.2:mariadb-10.5.21-150300.3.32.5 SUSE Manager Proxy 4.2:mariadb-client-10.5.21-150300.3.32.5 SUSE Manager Proxy 4.2:mariadb-errormessages-10.5.21-150300.3.32.5 SUSE Manager Proxy 4.2:mariadb-tools-10.5.21-150300.3.32.5 SUSE Manager Server 4.2:libmariadbd-devel-10.5.21-150300.3.32.5 SUSE Manager Server 4.2:libmariadbd19-10.5.21-150300.3.32.5 SUSE Manager Server 4.2:mariadb-10.5.21-150300.3.32.5 SUSE Manager Server 4.2:mariadb-client-10.5.21-150300.3.32.5 SUSE Manager Server 4.2:mariadb-errormessages-10.5.21-150300.3.32.5 SUSE Manager Server 4.2:mariadb-tools-10.5.21-150300.3.32.5 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232991-1/ https://www.suse.com/security/cve/CVE-2022-47015.html CVE-2022-47015 https://bugzilla.suse.com/1207404 SUSE Bug 1207404