Security update for mariadb SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3712-1 Final 1 1 2023-09-20T18:04:40Z current 2023-09-20T18:04:40Z 2023-09-20T18:04:40Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for mariadb This update for mariadb fixes the following issues: Updated to version 10.4.31: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query (bsc#1207404). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-3712,SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-3712,SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-3712,SUSE-SLE-Product-SLES_SAP-15-SP2-2023-3712,SUSE-Storage-7-2023-3712 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233712-1/ Link for SUSE-SU-2023:3712-1 https://lists.suse.com/pipermail/sle-security-updates/2023-September/016257.html E-Mail link for SUSE-SU-2023:3712-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1207404 SUSE Bug 1207404 https://www.suse.com/security/cve/CVE-2022-47015/ SUSE CVE CVE-2022-47015 page SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP2 libmariadbd-devel-10.4.31-150200.3.45.1 libmariadbd19-10.4.31-150200.3.45.1 mariadb-10.4.31-150200.3.45.1 mariadb-bench-10.4.31-150200.3.45.1 mariadb-client-10.4.31-150200.3.45.1 mariadb-errormessages-10.4.31-150200.3.45.1 mariadb-galera-10.4.31-150200.3.45.1 mariadb-rpm-macros-10.4.31-150200.3.45.1 mariadb-test-10.4.31-150200.3.45.1 mariadb-tools-10.4.31-150200.3.45.1 libmariadbd-devel-10.4.31-150200.3.45.1 as a component of SUSE Enterprise Storage 7 libmariadbd19-10.4.31-150200.3.45.1 as a component of SUSE Enterprise Storage 7 mariadb-10.4.31-150200.3.45.1 as a component of SUSE Enterprise Storage 7 mariadb-client-10.4.31-150200.3.45.1 as a component of SUSE Enterprise Storage 7 mariadb-errormessages-10.4.31-150200.3.45.1 as a component of SUSE Enterprise Storage 7 mariadb-tools-10.4.31-150200.3.45.1 as a component of SUSE Enterprise Storage 7 libmariadbd-devel-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libmariadbd19-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS mariadb-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS mariadb-client-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS mariadb-errormessages-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS mariadb-tools-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libmariadbd-devel-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libmariadbd19-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS mariadb-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS mariadb-client-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS mariadb-errormessages-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS mariadb-tools-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libmariadbd-devel-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libmariadbd19-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 mariadb-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 mariadb-client-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 mariadb-errormessages-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 mariadb-tools-10.4.31-150200.3.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer. CVE-2022-47015 SUSE Enterprise Storage 7:libmariadbd-devel-10.4.31-150200.3.45.1 SUSE Enterprise Storage 7:libmariadbd19-10.4.31-150200.3.45.1 SUSE Enterprise Storage 7:mariadb-10.4.31-150200.3.45.1 SUSE Enterprise Storage 7:mariadb-client-10.4.31-150200.3.45.1 SUSE Enterprise Storage 7:mariadb-errormessages-10.4.31-150200.3.45.1 SUSE Enterprise Storage 7:mariadb-tools-10.4.31-150200.3.45.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libmariadbd-devel-10.4.31-150200.3.45.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libmariadbd19-10.4.31-150200.3.45.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:mariadb-10.4.31-150200.3.45.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:mariadb-client-10.4.31-150200.3.45.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:mariadb-errormessages-10.4.31-150200.3.45.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:mariadb-tools-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libmariadbd-devel-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libmariadbd19-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server 15 SP2-LTSS:mariadb-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server 15 SP2-LTSS:mariadb-client-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server 15 SP2-LTSS:mariadb-errormessages-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server 15 SP2-LTSS:mariadb-tools-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libmariadbd-devel-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libmariadbd19-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:mariadb-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:mariadb-client-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:mariadb-errormessages-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:mariadb-tools-10.4.31-150200.3.45.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233712-1/ https://www.suse.com/security/cve/CVE-2022-47015.html CVE-2022-47015 https://bugzilla.suse.com/1207404 SUSE Bug 1207404