{"affected":[{"ecosystem_specific":{"binaries":[{"mariadb":"10.2.36-19.1","mariadb-client":"10.2.36-19.1","mariadb-errormessages":"10.2.36-19.1","mariadb-galera":"10.2.36-19.1","mariadb-tools":"10.2.36-19.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud 7","name":"mariadb","purl":"purl:rpm/suse/mariadb&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"10.2.36-19.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for mariadb includes the following fixes:\n\nSecurity fixes included in this update:\n\n- CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-2812: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-2814: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-2760: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-13249: Fixed an improper validation of the content of an OK packet received from a server.\n- CVE-2020-14812: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-14765: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-14776: Fixed an issue which could have resulted in unauthorized ability of accessing data.\n- CVE-2020-14789: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-15180: Fixed an issue in Galera which could have led to remote code execution.\n\n\nNon Security fixes included in this update:\n\n- Update to 10.2.36 GA [bsc#1177472] and [bsc#1178428]\n  * release notes and changelog:\n    https://mariadb.com/kb/en/library/mariadb-10236-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10236-changelog\n    https://mariadb.com/kb/en/library/mariadb-10235-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10235-changelog\n    https://mariadb.com/kb/en/library/mariadb-10234-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10234-changelog\n  * fixes for the following security vulnerabilities:\n    10.2.36: none\n    10.2.35: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,\n             CVE-2020-14789\n    10.2.34: CVE-2020-15180\n- update suse_skipped_tests.list\n\n- Update to 10.2.33 GA [bsc#1175596]\n  * release notes and changelog:\n    https://mariadb.com/kb/en/library/mariadb-10233-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10233-changelog\n  * fixes for the following security vulnerabilities: none\n- refresh mariadb-10.2.4-fortify-and-O.patch\n- tune the testsuite to avoid randomly failing tests\n- update suse_skipped_tests.list\n\n- Update to 10.2.32 GA [bsc#1171550]\n  * Fixes for the following security vulnerabilities:\n    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,\n    CVE-2020-13249\n  * release notes and changelog:\n    https://mariadb.com/kb/en/library/mariadb-10232-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10232-changelog\n- refresh mariadb-10.2.4-fortify-and-O.patch\n- drop specfile 'hacks' as things work correctly in upstream now:\n  * renaming tmpfiles.conf -> mariadb.conf\n  * installing pam_user_map.so to /lib64/security for non 32bit\n    architectures\n  * sysusers.conf was renamed to mariadb.conf\n- update suse_skipped_tests.list\n","id":"SUSE-SU-2020:3625-1","modified":"2020-12-04T11:52:48Z","published":"2020-12-04T11:52:48Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203625-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1171550"},{"type":"REPORT","url":"https://bugzilla.suse.com/1175596"},{"type":"REPORT","url":"https://bugzilla.suse.com/1177472"},{"type":"REPORT","url":"https://bugzilla.suse.com/1178428"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-13249"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14765"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14776"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14789"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14812"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-15180"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-2752"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-2760"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-2812"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-2814"}],"related":["CVE-2020-13249","CVE-2020-14765","CVE-2020-14776","CVE-2020-14789","CVE-2020-14812","CVE-2020-15180","CVE-2020-2752","CVE-2020-2760","CVE-2020-2812","CVE-2020-2814"],"summary":"Security update for mariadb"}