{"affected":[{"ecosystem_specific":{"binaries":[{"libmariadb3":"3.1.8-2.15.1","libmariadb_plugins":"3.1.8-2.15.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","name":"mariadb-connector-c","purl":"purl:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.8-2.15.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libmariadb3":"3.1.8-2.15.1","libmariadb_plugins":"3.1.8-2.15.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","name":"mariadb-connector-c","purl":"purl:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.8-2.15.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libmariadb3":"3.1.8-2.15.1","libmariadb_plugins":"3.1.8-2.15.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","name":"mariadb-connector-c","purl":"purl:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.8-2.15.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libmariadb3":"3.1.8-2.15.1","libmariadb_plugins":"3.1.8-2.15.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","name":"mariadb-connector-c","purl":"purl:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.8-2.15.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for mariadb-connector-c fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2020-13249: Fixed an improper validation of OK packets received from clients (bsc#1171550).\n\nNon-security issues fixed:\n\n- Update to release 3.1.8 (bsc#1171550)\n  * CONC-304: Rename the static library to libmariadb.a and other libmariadb files in a consistent manner\n  * CONC-441: Default user name for C/C is wrong if login user is different from effective user\n  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to $MYSQL_HOME/my.cnf\n  * CONC-457: mysql_list_processes crashes in unpack_fields\n  * CONC-458: mysql_get_timeout_value crashes when used improper\n  * CONC-464: Fix static build for auth_gssapi_client plugin\n","id":"SUSE-SU-2020:1431-1","modified":"2020-05-26T15:37:33Z","published":"2020-05-26T15:37:33Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201431-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1171550"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-13249"}],"related":["CVE-2020-13249"],"summary":"Security update for mariadb-connector-c"}