Security update for mariadb
This update for mariadb fixes the following issues: - Added mariadb-galera (jsc#SLE-22245) Update to 10.6.8 (bsc#1199928): - CVE-2021-46669 (bsc#1199928) - CVE-2022-27376 (bsc#1198628) - CVE-2022-27377 (bsc#1198603) - CVE-2022-27378 (bsc#1198604) - CVE-2022-27379 (bsc#1198605) - CVE-2022-27380 (bsc#1198606) - CVE-2022-27381 (bsc#1198607) - CVE-2022-27382 (bsc#1198609) - CVE-2022-27383 (bsc#1198610) - CVE-2022-27384 (bsc#1198611) - CVE-2022-27386 (bsc#1198612) - CVE-2022-27387 (bsc#1198613) - CVE-2022-27444 (bsc#1198634) - CVE-2022-27445 (bsc#1198629) - CVE-2022-27446 (bsc#1198630) - CVE-2022-27447 (bsc#1198631) - CVE-2022-27448 (bsc#1198632) - CVE-2022-27449 (bsc#1198633) - CVE-2022-27451 (bsc#1198639) - CVE-2022-27452 (bsc#1198640) - CVE-2022-27455 (bsc#1198638) - CVE-2022-27456 (bsc#1198635) - CVE-2022-27457 (bsc#1198636) - CVE-2022-27458 (bsc#1198637) - The following issue is not affecting this package: CVE-2022-21427 Update to 10.6.7 (bsc#1196016): - CVE-2021-46665, CVE-2021-46664, CVE-2021-46661, CVE-2021-46668, CVE-2021-46663 Update to 10.6.6: - CVE-2022-24052, CVE-2022-24051, CVE-2022-24050, CVE-2022-24048, CVE-2021-46659 (bsc#1195339) The following issues have been fixed already but didn't have CVE references: - CVE-2021-46658 (bsc#1195334) - CVE-2021-46657 (bsc#1195325) Non security fixes: - Skip failing tests for s390x, fixes bsc#1195076 External refernences: - https://mariadb.com/kb/en/library/mariadb-1068-release-notes - https://mariadb.com/kb/en/library/mariadb-1068-changelog - https://mariadb.com/kb/en/library/mariadb-1067-release-notes - https://mariadb.com/kb/en/library/mariadb-1067-changelog - https://mariadb.com/kb/en/library/mariadb-1066-release-notes - https://mariadb.com/kb/en/library/mariadb-1066-changelog
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for mariadb fixes the following issues: - Added mariadb-galera (jsc#SLE-22245) Update to 10.6.8 (bsc#1199928): - CVE-2021-46669 (bsc#1199928) - CVE-2022-27376 (bsc#1198628) - CVE-2022-27377 (bsc#1198603) - CVE-2022-27378 (bsc#1198604) - CVE-2022-27379 (bsc#1198605) - CVE-2022-27380 (bsc#1198606) - CVE-2022-27381 (bsc#1198607) - CVE-2022-27382 (bsc#1198609) - CVE-2022-27383 (bsc#1198610) - CVE-2022-27384 (bsc#1198611) - CVE-2022-27386 (bsc#1198612) - CVE-2022-27387 (bsc#1198613) - CVE-2022-27444 (bsc#1198634) - CVE-2022-27445 (bsc#1198629) - CVE-2022-27446 (bsc#1198630) - CVE-2022-27447 (bsc#1198631) - CVE-2022-27448 (bsc#1198632) - CVE-2022-27449 (bsc#1198633) - CVE-2022-27451 (bsc#1198639) - CVE-2022-27452 (bsc#1198640) - CVE-2022-27455 (bsc#1198638) - CVE-2022-27456 (bsc#1198635) - CVE-2022-27457 (bsc#1198636) - CVE-2022-27458 (bsc#1198637) - The following issue is not affecting this package: CVE-2022-21427 Update to 10.6.7 (bsc#1196016): - CVE-2021-46665, CVE-2021-46664, CVE-2021-46661, CVE-2021-46668, CVE-2021-46663 Update to 10.6.6: - CVE-2022-24052, CVE-2022-24051, CVE-2022-24050, CVE-2022-24048, CVE-2021-46659 (bsc#1195339) The following issues have been fixed already but didn't have CVE references: - CVE-2021-46658 (bsc#1195334) - CVE-2021-46657 (bsc#1195325) Non security fixes: - Skip failing tests for s390x, fixes bsc#1195076 External refernences: - https://mariadb.com/kb/en/library/mariadb-1068-release-notes - https://mariadb.com/kb/en/library/mariadb-1068-changelog - https://mariadb.com/kb/en/library/mariadb-1067-release-notes - https://mariadb.com/kb/en/library/mariadb-1067-changelog - https://mariadb.com/kb/en/library/mariadb-1066-release-notes - https://mariadb.com/kb/en/library/mariadb-1066-changelog
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1195076
- https://bugzilla.suse.com/1195325
- https://bugzilla.suse.com/1195334
- https://bugzilla.suse.com/1195339
- https://bugzilla.suse.com/1196016
- https://bugzilla.suse.com/1198603
- https://bugzilla.suse.com/1198604
- https://bugzilla.suse.com/1198605
- https://bugzilla.suse.com/1198606
- https://bugzilla.suse.com/1198607
- https://bugzilla.suse.com/1198609
- https://bugzilla.suse.com/1198610
- https://bugzilla.suse.com/1198611
- https://bugzilla.suse.com/1198612
- https://bugzilla.suse.com/1198613
- https://bugzilla.suse.com/1198628
- https://bugzilla.suse.com/1198629
- https://bugzilla.suse.com/1198630
- https://bugzilla.suse.com/1198631
- https://bugzilla.suse.com/1198632
- https://bugzilla.suse.com/1198633
- https://bugzilla.suse.com/1198634
- https://bugzilla.suse.com/1198635
- https://bugzilla.suse.com/1198636
- https://bugzilla.suse.com/1198637
- https://bugzilla.suse.com/1198638
- https://bugzilla.suse.com/1198639
- https://bugzilla.suse.com/1198640
- https://bugzilla.suse.com/1199928
- https://www.suse.com/security/cve/CVE-2021-46657
- https://www.suse.com/security/cve/CVE-2021-46658
- https://www.suse.com/security/cve/CVE-2021-46659
- https://www.suse.com/security/cve/CVE-2021-46661
- https://www.suse.com/security/cve/CVE-2021-46663
- https://www.suse.com/security/cve/CVE-2021-46664
- https://www.suse.com/security/cve/CVE-2021-46665
- https://www.suse.com/security/cve/CVE-2021-46668
- https://www.suse.com/security/cve/CVE-2021-46669
- https://www.suse.com/security/cve/CVE-2022-24048
- https://www.suse.com/security/cve/CVE-2022-24050
- https://www.suse.com/security/cve/CVE-2022-24051
- https://www.suse.com/security/cve/CVE-2022-24052
- https://www.suse.com/security/cve/CVE-2022-27376
- https://www.suse.com/security/cve/CVE-2022-27377
- https://www.suse.com/security/cve/CVE-2022-27378
- https://www.suse.com/security/cve/CVE-2022-27379
- https://www.suse.com/security/cve/CVE-2022-27380
- https://www.suse.com/security/cve/CVE-2022-27381
- https://www.suse.com/security/cve/CVE-2022-27382
- https://www.suse.com/security/cve/CVE-2022-27383
- https://www.suse.com/security/cve/CVE-2022-27384
- https://www.suse.com/security/cve/CVE-2022-27386
- https://www.suse.com/security/cve/CVE-2022-27387
- https://www.suse.com/security/cve/CVE-2022-27444
- https://www.suse.com/security/cve/CVE-2022-27445
- https://www.suse.com/security/cve/CVE-2022-27446
- https://www.suse.com/security/cve/CVE-2022-27447
- https://www.suse.com/security/cve/CVE-2022-27448
- https://www.suse.com/security/cve/CVE-2022-27449
- https://www.suse.com/security/cve/CVE-2022-27451
- https://www.suse.com/security/cve/CVE-2022-27452
- https://www.suse.com/security/cve/CVE-2022-27455
- https://www.suse.com/security/cve/CVE-2022-27456
- https://www.suse.com/security/cve/CVE-2022-27457
- https://www.suse.com/security/cve/CVE-2022-27458
- https://www.suse.com/support/update/announcement/2022/suse-su-20222561-1/