| Description: | Summary:
The remote host is missing an update for the 'mariadb'
package(s) announced via the referenced advisory.
Vulnerability Insight:
This mariadb version update to 10.0.29 fixes the following issues:
- CVE-2017-3318: unspecified vulnerability affecting Error Handling
(bsc#1020896)
- CVE-2017-3317: unspecified vulnerability affecting Logging (bsc#1020894)
- CVE-2017-3312: insecure error log file handling in mysqld_safe,
incomplete CVE-2016-6664 (bsc#1020873)
- CVE-2017-3291: unrestricted mysqld_safe's ledir (bsc#1020884)
- CVE-2017-3265: unsafe chmod/chown use in init script (bsc#1020885)
- CVE-2017-3258: unspecified vulnerability in the DDL component
(bsc#1020875)
- CVE-2017-3257: unspecified vulnerability affecting InnoDB (bsc#1020878)
- CVE-2017-3244: unspecified vulnerability affecing the DML component
(bsc#1020877)
- CVE-2017-3243: unspecified vulnerability affecting the Charsets
component (bsc#1020891)
- CVE-2017-3238: unspecified vulnerability affecting the Optimizer
component (bsc#1020882)
- CVE-2016-6664: Root Privilege Escalation (bsc#1008253)
- Applications using the client library for MySQL (libmysqlclient.so) had
a use-after-free issue that could cause the applications to crash
(bsc#1022428)
- notable changes:
* XtraDB updated to 5.6.34-79.1
* TokuDB updated to 5.6.34-79.1
* Innodb updated to 5.6.35
* Performance Schema updated to 5.6.35
Release notes and changelog are linked in the references.
This update was imported from the SUSE:SLE-12-SP1:Update update project.
Affected Software/OS:
mariadb on openSUSE Leap 42.1
Solution:
Please install the updated package(s).
CVSS Score:
6.9
CVSS Vector:
AV:L/AC:M/Au:N/C:C/I:C/A:C
|
