File _patchinfo of Package patchinfo.5248

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.5248

<patchinfo incident="5248">
  <issue id="963041" tracker="bnc">mysql-systemd-helper wait default - cannot be stopped when mariadb failing to start</issue>
  <issue id="1048715" tracker="bnc">VUL-0: mariadb: 10.0.31 release</issue>
  <issue id="2017-3308" tracker="cve" />
  <issue id="2017-3464" tracker="cve" />
  <issue id="2017-3456" tracker="cve" />
  <issue id="2017-3453" tracker="cve" />
  <issue id="2017-3309" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>kstreitova</packager>
  <description>This MariaDB update to version 10.0.31 GA fixes the following issues:

Security issues fixed:
- CVE-2017-3308: Subcomponent: Server: DML: Easily "exploitable" vulnerability allows low
  privileged attacker with network access via multiple protocols to compromise MariaDB Server.
  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or
  frequently repeatable crash (complete DOS). (bsc#1048715)
- CVE-2017-3309: Subcomponent: Server: Optimizer: Easily "exploitable" vulnerability allows low
  privileged attacker with network access via multiple protocols to compromise MariaDB Server.
  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or
  frequently repeatable crash (complete DOS). (bsc#1048715)
- CVE-2017-3453: Subcomponent: Server: Optimizer: Easily "exploitable" vulnerability allows low
  privileged attacker with network access via multiple protocols to compromise MariaDB Server.
  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or
  frequently repeatable crash (complete DOS). (bsc#1048715)
- CVE-2017-3456: Subcomponent: Server: DML: Easily "exploitable" vulnerability allows low
  privileged attacker with network access via multiple protocols to compromise MariaDB Server.
  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or
  frequently repeatable crash (complete DOS). (bsc#1048715)
- CVE-2017-3464: Subcomponent: Server: DDL: Easily "exploitable" vulnerability allows low
  privileged attacker with network access via multiple protocols to compromise MariaDB Server.
  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or
  frequently repeatable crash (complete DOS). (bsc#1048715)

Bug fixes:
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) (bsc#963041)
- XtraDB updated to 5.6.36-82.0
- TokuDB updated to 5.6.36-82.0
- Innodb updated to 5.6.36
- Performance Schema updated to 5.6.36

Release notes and changelog:
- https://kb.askmonty.org/en/mariadb-10031-release-notes
- https://kb.askmonty.org/en/mariadb-10031-changelog

</description>
  <summary>Security update for mariadb</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.5248

Places