Security update for mariadb SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2018:1595-1 Final 1 1 2018-06-07T18:48:12Z current 2018-06-07T18:48:12Z 2018-06-07T18:48:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mariadb This update for mariadb to version 10.2.15 fixes the following issues: These security issues were fixed: - CVE-2018-2767: Enforse use of SSL/TLS in embedded server library (Return of BACKRONYM) (bsc#1088681). - CVE-2018-2786: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Easily exploitable vulnerability allowed high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data (bsc#1089987). - CVE-2018-2759: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Easily exploitable vulnerability allowed high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987). - CVE-2018-2777: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Easily exploitable vulnerability allowed high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987). - CVE-2018-2810: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Easily exploitable vulnerability allowed high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987). - CVE-2018-2782: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Easily exploitable vulnerability allowed low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987, bsc#1090518). - CVE-2018-2784: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Easily exploitable vulnerability allowed low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987, bsc#1090518). - CVE-2018-2787: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Easily exploitable vulnerability allowed high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data (bsc#1089987, bsc#1090518). - CVE-2018-2766: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Easily exploitable vulnerability allowed high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987, bsc#1090518). - CVE-2018-2755: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Difficult to exploit vulnerability allowed unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Server (bsc#1089987, bsc#1090518). - CVE-2018-2819: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Easily exploitable vulnerability allowed low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987, bsc#1090518). - CVE-2018-2817: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Easily exploitable vulnerability allowed low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987, bsc#1090518). - CVE-2018-2761: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987, bsc#1090518). - CVE-2018-2781: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Easily exploitable vulnerability allowed high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987, bsc#1090518). - CVE-2018-2771: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). Difficult to exploit vulnerability allowed high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server (bsc#1089987, bsc#1090518). - CVE-2018-2813: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Easily exploitable vulnerability allowed low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data (bsc#1089987, bsc#1090518). These non-security issues were fixed: - PCRE updated to 8.42 - Incomplete validation of missing tablespace during recovery - ib_buffer_pool unnecessarily includes the temporary tablespace - InnoDB may write uninitialized garbage to redo log - Virtual Columns: Assertion failed in dict_table_get_col_name - slow innodb startup/shutdown can exceed systemd timeout - Assertion failed in dict_check_sys_tables on upgrade from 5.5 - Change buffer crash during TRUNCATE or DROP TABLE - temporary table ROLLBACK fixes For additional details please see - https://mariadb.com/kb/en/library/mariadb-10215-release-notes - https://mariadb.com/kb/en/library/mariadb-10215-changelog The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html E-Mail link for openSUSE-SU-2018:1595-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 15.0 libmysqld-devel-10.2.15-lp150.2.3.2 libmysqld19-10.2.15-lp150.2.3.2 mariadb-10.2.15-lp150.2.3.2 mariadb-bench-10.2.15-lp150.2.3.2 mariadb-client-10.2.15-lp150.2.3.2 mariadb-errormessages-10.2.15-lp150.2.3.2 mariadb-galera-10.2.15-lp150.2.3.2 mariadb-test-10.2.15-lp150.2.3.2 mariadb-tools-10.2.15-lp150.2.3.2 libmysqld-devel-10.2.15-lp150.2.3.2 as a component of openSUSE Leap 15.0 libmysqld19-10.2.15-lp150.2.3.2 as a component of openSUSE Leap 15.0 mariadb-10.2.15-lp150.2.3.2 as a component of openSUSE Leap 15.0 mariadb-bench-10.2.15-lp150.2.3.2 as a component of openSUSE Leap 15.0 mariadb-client-10.2.15-lp150.2.3.2 as a component of openSUSE Leap 15.0 mariadb-errormessages-10.2.15-lp150.2.3.2 as a component of openSUSE Leap 15.0 mariadb-galera-10.2.15-lp150.2.3.2 as a component of openSUSE Leap 15.0 mariadb-test-10.2.15-lp150.2.3.2 as a component of openSUSE Leap 15.0 mariadb-tools-10.2.15-lp150.2.3.2 as a component of openSUSE Leap 15.0 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.0 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2018-2755 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 important Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2755.html CVE-2018-2755 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2759 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2759.html CVE-2018-2759 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2761 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2761.html CVE-2018-2761 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2766 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2766.html CVE-2018-2766 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N). CVE-2018-2767 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2767.html CVE-2018-2767 https://bugzilla.suse.com/1088681 SUSE Bug 1088681 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1101675 SUSE Bug 1101675 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2771 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2771.html CVE-2018-2771 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2777 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2777.html CVE-2018-2777 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2781 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2781.html CVE-2018-2781 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2782 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2782.html CVE-2018-2782 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2784 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2784.html CVE-2018-2784 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). CVE-2018-2786 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2786.html CVE-2018-2786 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). CVE-2018-2787 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2787.html CVE-2018-2787 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2810 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2810.html CVE-2018-2810 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). CVE-2018-2813 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2813.html CVE-2018-2813 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2817 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2817.html CVE-2018-2817 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292 Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). CVE-2018-2819 openSUSE Leap 15.0:libmysqld-devel-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:libmysqld19-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-bench-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-client-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-errormessages-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-galera-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-test-10.2.15-lp150.2.3.2 openSUSE Leap 15.0:mariadb-tools-10.2.15-lp150.2.3.2 moderate Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2018-06/msg00008.html https://www.suse.com/security/cve/CVE-2018-2819.html CVE-2018-2819 https://bugzilla.suse.com/1089987 SUSE Bug 1089987 https://bugzilla.suse.com/1090518 SUSE Bug 1090518 https://bugzilla.suse.com/1101651 SUSE Bug 1101651 https://bugzilla.suse.com/1101653 SUSE Bug 1101653 https://bugzilla.suse.com/1112147 SUSE Bug 1112147 https://bugzilla.suse.com/1112151 SUSE Bug 1112151 https://bugzilla.suse.com/1122292 SUSE Bug 1122292