Bug 1090518 – VUL-0: mariadb: 10.0.35 release

Bug 1090518 - VUL-0: mariadb: 10.0.35 release


Summary:	VUL-0: mariadb: 10.0.35 release

Status:	RESOLVED FIXED

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other Other

Priority:	P3 - Medium Severity: Normal
Target Milestone:	---
Assigned To:	Security Team bot
QA Contact:	Security Team bot

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2018-04-23 10:01 UTC by Alexander Bergmann
Modified:	2019-05-06 13:56 UTC (History)
CC List:	5 users (show)

See Also:
Found By:	---
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Alexander Bergmann 2018-04-23 10:01:15 UTC

https://mariadb.com/kb/en/library/mariadb-10035-release-notes/

MariaDB 10.0.35 Release Notes

Notable changes
The embedded server library now supports SSL when connecting to remote servers. 

Fixes for the following security vulnerabilities:
- CVE-2018-2782
- CVE-2018-2784
- CVE-2018-2787
- CVE-2018-2766
- CVE-2018-2755
- CVE-2018-2819
- CVE-2018-2817
- CVE-2018-2761
- CVE-2018-2781
- CVE-2018-2771
- CVE-2018-2813

It looks like this version is not fully released yet.

https://downloads.mariadb.org/

Comment 5 Swamp Workflow Management 2018-05-23 13:09:17 UTC

SUSE-SU-2018:1382-1: An update that fixes 12 vulnerabilities is now available.

Category: security (important)
Bug References: 1088681,1090518
CVE References: CVE-2018-2755,CVE-2018-2761,CVE-2018-2766,CVE-2018-2767,CVE-2018-2771,CVE-2018-2781,CVE-2018-2782,CVE-2018-2784,CVE-2018-2787,CVE-2018-2813,CVE-2018-2817,CVE-2018-2819
Sources used:
SUSE Linux Enterprise Server 12-LTSS (src):    mariadb-10.0.35-20.46.1

Comment 6 Swamp Workflow Management 2018-06-07 22:12:40 UTC

openSUSE-SU-2018:1595-1: An update that fixes 16 vulnerabilities is now available.

Category: security (moderate)
Bug References: 1088681,1089987,1090518,1092544
CVE References: CVE-2018-2755,CVE-2018-2759,CVE-2018-2761,CVE-2018-2766,CVE-2018-2767,CVE-2018-2771,CVE-2018-2777,CVE-2018-2781,CVE-2018-2782,CVE-2018-2784,CVE-2018-2786,CVE-2018-2787,CVE-2018-2810,CVE-2018-2813,CVE-2018-2817,CVE-2018-2819
Sources used:
openSUSE Leap 15.0 (src):    mariadb-10.2.15-lp150.2.3.2

Comment 7 Swamp Workflow Management 2018-06-22 10:11:33 UTC

SUSE-SU-2018:1781-1: An update that fixes 12 vulnerabilities is now available.

Category: security (important)
Bug References: 1088681,1090518
CVE References: CVE-2018-2755,CVE-2018-2761,CVE-2018-2766,CVE-2018-2767,CVE-2018-2771,CVE-2018-2781,CVE-2018-2782,CVE-2018-2784,CVE-2018-2787,CVE-2018-2813,CVE-2018-2817,CVE-2018-2819
Sources used:
SUSE Linux Enterprise Workstation Extension 12-SP3 (src):    mariadb-10.0.35-29.20.3
SUSE Linux Enterprise Software Development Kit 12-SP3 (src):    mariadb-10.0.35-29.20.3
SUSE Linux Enterprise Server for SAP 12-SP2 (src):    mariadb-10.0.35-29.20.3
SUSE Linux Enterprise Server for SAP 12-SP1 (src):    mariadb-10.0.35-29.20.3
SUSE Linux Enterprise Server 12-SP3 (src):    mariadb-10.0.35-29.20.3
SUSE Linux Enterprise Server 12-SP2-LTSS (src):    mariadb-10.0.35-29.20.3
SUSE Linux Enterprise Server 12-SP1-LTSS (src):    mariadb-10.0.35-29.20.3
SUSE Linux Enterprise Desktop 12-SP3 (src):    mariadb-10.0.35-29.20.3
SUSE Enterprise Storage 4 (src):    mariadb-10.0.35-29.20.3

Comment 8 Swamp Workflow Management 2018-06-23 01:12:39 UTC

openSUSE-SU-2018:1800-1: An update that fixes 12 vulnerabilities is now available.

Category: security (important)
Bug References: 1088681,1090518
CVE References: CVE-2018-2755,CVE-2018-2761,CVE-2018-2766,CVE-2018-2767,CVE-2018-2771,CVE-2018-2781,CVE-2018-2782,CVE-2018-2784,CVE-2018-2787,CVE-2018-2813,CVE-2018-2817,CVE-2018-2819
Sources used:
openSUSE Leap 42.3 (src):    mariadb-10.0.35-35.1

Comment 10 Johannes Segitz 2018-07-04 09:34:01 UTC

fixed

Comment 11 Swamp Workflow Management 2018-10-18 17:46:25 UTC

SUSE-SU-2018:1781-2: An update that fixes 12 vulnerabilities is now available.

Category: security (important)
Bug References: 1088681,1090518
CVE References: CVE-2018-2755,CVE-2018-2761,CVE-2018-2766,CVE-2018-2767,CVE-2018-2771,CVE-2018-2781,CVE-2018-2782,CVE-2018-2784,CVE-2018-2787,CVE-2018-2813,CVE-2018-2817,CVE-2018-2819
Sources used:
SUSE Linux Enterprise Server 12-SP2-BCL (src):    mariadb-10.0.35-29.20.3