Test ID:	1.3.6.1.4.1.25623.1.1.4.2018.1382.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2018:1382-1)
Summary:	The remote host is missing an update for the 'mariadb' package(s) announced via the SUSE-SU-2018:1382-1 advisory.
Description:	Summary: The remote host is missing an update for the 'mariadb' package(s) announced via the SUSE-SU-2018:1382-1 advisory. Vulnerability Insight: MariaDB was updated to 10.0.35 (bsc#1090518) Notable changes: * PCRE updated to 8.42 * XtraDB updated to 5.6.39-83.1 * TokuDB updated to 5.6.39-83.1 * InnoDB updated to 5.6.40 * The embedded server library now supports SSL when connecting to remote servers [bsc#1088681], [CVE-2018-2767] * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE * MDEV-14988 - innodb_read_only tries to modify files if transactions were recovered in COMMITTED state * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT index * MDEV-15723 - Crash in INFORMATION_SCHEMA.INNODB_SYS_TABLES when accessing corrupted record * fixes for the following security vulnerabilities: CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766, CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761, CVE-2018-2781, CVE-2018-2771, CVE-2018-2813 * Release notes and changelog: * [links moved to references] Affected Software/OS: 'mariadb' package(s) on SUSE Linux Enterprise Server 12. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-2755 BugTraq ID: 103807 http://www.securityfocus.com/bid/103807 Debian Security Information: DSA-4176 (Google Search) https://www.debian.org/security/2018/dsa-4176 Debian Security Information: DSA-4341 (Google Search) https://www.debian.org/security/2018/dsa-4341 https://security.gentoo.org/glsa/201908-24 https://lists.debian.org/debian-lts-announce/2018/04/msg00020.html https://lists.debian.org/debian-lts-announce/2018/06/msg00015.html RedHat Security Advisories: RHSA-2018:1254 https://access.redhat.com/errata/RHSA-2018:1254 RedHat Security Advisories: RHSA-2018:2439 https://access.redhat.com/errata/RHSA-2018:2439 RedHat Security Advisories: RHSA-2018:2729 https://access.redhat.com/errata/RHSA-2018:2729 RedHat Security Advisories: RHSA-2018:3655 https://access.redhat.com/errata/RHSA-2018:3655 RedHat Security Advisories: RHSA-2019:1258 https://access.redhat.com/errata/RHSA-2019:1258 http://www.securitytracker.com/id/1040698 https://usn.ubuntu.com/3629-1/ https://usn.ubuntu.com/3629-2/ https://usn.ubuntu.com/3629-3/ Common Vulnerability Exposure (CVE) ID: CVE-2018-2761 BugTraq ID: 103820 http://www.securityfocus.com/bid/103820 Common Vulnerability Exposure (CVE) ID: CVE-2018-2766 BugTraq ID: 103805 http://www.securityfocus.com/bid/103805 Common Vulnerability Exposure (CVE) ID: CVE-2018-2767 BugTraq ID: 103954 http://www.securityfocus.com/bid/103954 https://lists.debian.org/debian-lts-announce/2018/11/msg00004.html http://www.securitytracker.com/id/1041294 https://usn.ubuntu.com/3725-1/ https://usn.ubuntu.com/3725-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-2771 BugTraq ID: 103828 http://www.securityfocus.com/bid/103828 Common Vulnerability Exposure (CVE) ID: CVE-2018-2781 BugTraq ID: 103825 http://www.securityfocus.com/bid/103825 Common Vulnerability Exposure (CVE) ID: CVE-2018-2782 BugTraq ID: 103799 http://www.securityfocus.com/bid/103799 Common Vulnerability Exposure (CVE) ID: CVE-2018-2784 BugTraq ID: 103801 http://www.securityfocus.com/bid/103801 Common Vulnerability Exposure (CVE) ID: CVE-2018-2787 BugTraq ID: 103804 http://www.securityfocus.com/bid/103804 Common Vulnerability Exposure (CVE) ID: CVE-2018-2813 BugTraq ID: 103830 http://www.securityfocus.com/bid/103830 Common Vulnerability Exposure (CVE) ID: CVE-2018-2817 BugTraq ID: 103818 http://www.securityfocus.com/bid/103818 Common Vulnerability Exposure (CVE) ID: CVE-2018-2819 BugTraq ID: 103814 http://www.securityfocus.com/bid/103814
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.