FlawAtlas
Search the atlas
SUSE-SU-2019:0119-1 Not scored

Security update for mariadb

This update for mariadb to version 10.2.19 fixes the following issues: (bsc#1116686) Security issues fixed: - CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882) - CVE-2018-3282, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156, CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-3173, CVE-2018-3200, CVE-2018-3284: Fixed multiple denial of service vulnerabilities (bsc#1112432, bsc#1112368, bsc#1112421, bsc#1112417, bsc#1112397, bsc#1112391, bsc#1112415, bsc#1112386, bsc#1112404, bsc#1112377, bsc#1112384) Non-security issues fixed: - Fixed database corruption after renaming a prefix-indexed column (bsc#1120041) - Remove PerconaFT from the package as it has a AGPL license (bsc#1118754) - Enable testing for client plugins (bsc#1111859) - Improve test coverage by keeping debug_key_management.so (bsc#1111858)

Exploit probability Not scored
Published January 18, 2019
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Desktop 12 SP4 mariadb
SUSE:Linux Enterprise Server 12 SP4 mariadb
SUSE:Linux Enterprise Server for SAP Applications 12 SP4 mariadb

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2019:0119-1

This update for mariadb to version 10.2.19 fixes the following issues: (bsc#1116686) Security issues fixed: - CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882) - CVE-2018-3282, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156, CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-3173, CVE-2018-3200, CVE-2018-3284: Fixed multiple denial of service vulnerabilities (bsc#1112432, bsc#1112368, bsc#1112421, bsc#1112417, bsc#1112397, bsc#1112391, bsc#1112415, bsc#1112386, bsc#1112404, bsc#1112377, bsc#1112384) Non-security issues fixed: - Fixed database corruption after renaming a prefix-indexed column (bsc#1120041) - Remove PerconaFT from the package as it has a AGPL license (bsc#1118754) - Enable testing for client plugins (bsc#1111859) - Improve test coverage by keeping debug_key_management.so (bsc#1111858)

View original source

05 / REFERENCES

Further evidence