{"affected":[{"ecosystem_specific":{"binaries":[{"libmariadb-devel":"3.1.8-lp151.3.12.1","libmariadb3":"3.1.8-lp151.3.12.1","libmariadb3-32bit":"3.1.8-lp151.3.12.1","libmariadb_plugins":"3.1.8-lp151.3.12.1","libmariadbprivate":"3.1.8-lp151.3.12.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.1","name":"mariadb-connector-c","purl":"purl:rpm/suse/mariadb-connector-c&distro=openSUSE%20Leap%2015.1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.8-lp151.3.12.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for mariadb-connector-c fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2020-13249: Fixed an improper validation of OK packets received from clients (bsc#1171550).\n\nNon-security issues fixed:\n\n- Update to release 3.1.8 (bsc#1171550)\n  * CONC-304: Rename the static library to libmariadb.a and other libmariadb files in a consistent manner\n  * CONC-441: Default user name for C/C is wrong if login user is different from effective user\n  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to $MYSQL_HOME/my.cnf\n  * CONC-457: mysql_list_processes crashes in unpack_fields\n  * CONC-458: mysql_get_timeout_value crashes when used improper\n  * CONC-464: Fix static build for auth_gssapi_client plugin\n\nThis update was imported from the SUSE:SLE-15:Update update project.","id":"openSUSE-SU-2020:0738-1","modified":"2020-05-29T14:16:27Z","published":"2020-05-29T14:16:27Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YTRGBZFOQUW3U6OD56LF22HPXM7O2CCN/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1171550"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-13249"}],"related":["CVE-2020-13249"],"summary":"Security update for mariadb-connector-c"}