CVE-2018-3060

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H).

This update for mariadb to version 10.2.22 fixes the following issues:

Security issues fixed:

• CVE-2019-2510: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
• CVE-2019-2537: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
• CVE-2018-3284: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112377)
• CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
• CVE-2018-3277: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112391)
• CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
• CVE-2018-3200: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112404)
• CVE-2018-3185: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112384)
• CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
• CVE-2018-3173: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112386)
• CVE-2018-3162: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112415)
• CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
• CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
• CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
• CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
• CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
• CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
• CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security issues fixed:

• Fixed an issue where mysl_install_db fails due to incorrect basedir (bsc#1127027).
• Fixed an issue where the lograte was not working (bsc#1112767).
• Backport Information Schema CHECK_CONSTRAINTS Table.
• Maximum value of table_definition_cache is now 2097152.
• InnoDB ALTER TABLE fixes.
• Galera crash recovery fixes.
• Encryption fixes.
• Remove xtrabackup dependency as MariaDB ships a build in mariabackup so xtrabackup is not needed (bsc#1122475).
• Maria DB testsuite - test main.plugin_auth failed (bsc#1111859)
• Maria DB testsuite - test encryption.second_plugin-12863 failed (bsc#1111858)
• Remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
• remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
• Database corruption after renaming a prefix-indexed column (bsc#1120041)

Release notes and changelog:

• https://mariadb.com/kb/en/library/mariadb-10222-release-notes
• https://mariadb.com/kb/en/library/mariadb-10222-changelog/

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the libmariadbd-devel-10.6.4-2.1 package on the GA media of openSUSE Tumbleweed.

This update for mariadb104 fixes the following issues:

• Implement version 10.4 of MariaDB (jsc#PED-2455):
  • It is possible to use more than one authentication plugin for each user account.
  • The root user account is being created with the ability to use two authentication plugins.
  • All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
  • Is being supported for User Password Expiry, which is not active by default.
  • Faster privilege checks for MariaDB setups with many user accounts or many database grants.
• Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
• MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
• Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
• Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)

This update for mariadb104 fixes the following issues:

• Implement version 10.4 of MariaDB (jsc#PED-2455):
  • It is possible to use more than one authentication plugin for each user account.
  • The root user account is being created with the ability to use two authentication plugins.
  • All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
  • Is being supported for User Password Expiry, which is not active by default.
  • Faster privilege checks for MariaDB setups with many user accounts or many database grants.
• Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
• MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
• Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
• Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)

This update for mariadb to version 10.2.22 fixes the following issues:

Security issues fixed:

• CVE-2019-2510: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
• CVE-2019-2537: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
• CVE-2018-3284: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112377)
• CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
• CVE-2018-3277: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112391)
• CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
• CVE-2018-3200: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112404)
• CVE-2018-3185: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112384)
• CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
• CVE-2018-3173: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112386)
• CVE-2018-3162: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112415)
• CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
• CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
• CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
• CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
• CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
• CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
• CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security issues fixed:

• Fixed an issue where mysl_install_db fails due to incorrect basedir (bsc#1127027).
• Fixed an issue where the lograte was not working (bsc#1112767).
• Backport Information Schema CHECK_CONSTRAINTS Table.
• Maximum value of table_definition_cache is now 2097152.
• InnoDB ALTER TABLE fixes.
• Galera crash recovery fixes.
• Encryption fixes.
• Remove xtrabackup dependency as MariaDB ships a build in mariabackup so xtrabackup is not needed (bsc#1122475).
• Maria DB testsuite - test main.plugin_auth failed (bsc#1111859)
• Maria DB testsuite - test encryption.second_plugin-12863 failed (bsc#1111858)
• Remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
• remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
• Database corruption after renaming a prefix-indexed column (bsc#1120041)

Release notes and changelog:

• https://mariadb.com/kb/en/library/mariadb-10222-release-notes
• https://mariadb.com/kb/en/library/mariadb-10222-changelog/

This update for mariadb, galera-3, mariadb-connector fixes the following issues:

Security vulnerabilities addressed for mariadb:

• CVE-2016-9843 [bsc#1013882]
• CVE-2018-3058 [bsc#1101676]
• CVE-2018-3060
• CVE-2018-3063 [bsc#1101677]
• CVE-2018-3064 [bsc#1103342]
• CVE-2018-3066 [bsc#1101678]
• CVE-2018-3143 [bsc#1112421]
• CVE-2018-3156 [bsc#1112417]
• CVE-2018-3162 [bsc#1112415]
• CVE-2018-3173 [bsc#1112386]
• CVE-2018-3174 [bsc#1112368]
• CVE-2018-3185 [bsc#1112384]
• CVE-2018-3200 [bsc#1112404]
• CVE-2018-3251 [bsc#1112397]
• CVE-2018-3277 [bsc#1112391]
• CVE-2018-3282 [bsc#1112432]
• CVE-2018-3284 [bsc#1112377]

Other bug fixes and changes for mariadb:

• update to 10.2.21 GA
  • MDEV-17589 - Stack-buffer-overflow with indexed varchar (utf8) field
  • MDEV-16987 - ALTER DATABASE possible in read-only mode (forbid ALTER DATABASE in read_only)
  • MDEV-17720 - slave_ddl_exec_mode=IDEMPOTENT does not handle DROP DATABASE
  • MDEV-6453 - Assertion `inited==NONE || (inited==RND && scan)' failed in handler::ha_rnd_init(bool) with InnoDB, joins, AND/OR conditions
  • MDEV-18105 - Mariabackup fails to copy encrypted InnoDB system tablespace if LSN>4G
  • MDEV-18041 - Database corruption after renaming a prefix-indexed column [bsc#1120041]
  • MDEV-17470 - Orphan temporary files after interrupted ALTER cause InnoDB: Operating system error number 17 and eventual fatal error 71
  • MDEV-17833: ALTER TABLE is not enforcing prefix index size limit
  • MDEV-17989: InnoDB: Failing assertion: dict_tf2_is_valid(flags, flags2)
  • MDEV-17765: Locking bug fix for SPATIAL INDEX
  • MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
  • Fixes for regressions introduced in MariaDB Server 10.2.19 by the backup-safe TRUNCATE TABLE (MDEV-13564, innodb_safe_truncate=ON) and innodb_undo_log_truncate:
    • MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
  • Several improvements to MariaDB Server and backup for dealing with encrypted or page_compressed pages:
    • MDEV-12112: corruption in encrypted table may be overlooked
    • MDEV-17958: On little-endian systems, remove bug-compatible variant of innodb_checksum_algorithm=crc32
    • MDEV-17957: Make innodb_checksum_algorithm stricter for strict_* values
    • MDEV-18025: Mariabackup fails to detect corrupted page_compressed=1 tables
  • release notes and changelog:
    • https://mariadb.com/kb/en/library/mariadb-10221-release-notes
    • https://mariadb.com/kb/en/library/mariadb-10221-changelog
    • https://mariadb.com/kb/en/library/mariadb-10220-release-notes
    • https://mariadb.com/kb/en/library/mariadb-10220-changelog
• remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
• Add patch to link against libatomic where necessary and use C++11 atomics instead of gcc built-in atomics
• update to 10.2.19 GA [bsc#1116686]
  • innodb_safe_truncate system variable for a backup-safe TRUNCATE TABLE implementation that is based on RENAME, CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default value for this variable is ON. If you absolutely must use XtraBackup instead of Mariabackup, you can set it to OFF and restart the server
  • MDEV-17289: Multi-pass recovery fails to apply some redo log records
  • MDEV-17073: INSERT…ON DUPLICATE KEY UPDATE became more deadlock-prone
  • MDEV-17491: micro optimize page_id_t
  • MDEV-13671: InnoDB should use case-insensitive column name comparisons like the rest of the server
  • Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
  • MDEV-17433: Allow InnoDB start up with empty ib_logfile0 from mariabackup --prepare
  • MDEV-12547: InnoDB FULLTEXT index has too strict innodb_ft_result_cache_limit max limit
  • MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY check…

This update for mariadb to version 10.2.22 fixes the following issues:

Security issues fixed:

• Update to MariaDB 10.2.22 GA:
  • CVE-2019-2510: (bsc#1122198)
  • CVE-2019-2537: (bsc#1122198)
• Update to MariaDB 10.2.19 GA (bsc#1116686):
  • CVE-2018-3282: (bsc#1112432)
  • CVE-2016-9843: (bsc#1013882)
  • CVE-2018-3174: (bsc#1112368)
  • CVE-2018-3143: (bsc#1112421)
  • CVE-2018-3156: (bsc#1112417)
  • CVE-2018-3251: (bsc#1112397)
  • CVE-2018-3185: (bsc#1112384)
  • CVE-2018-3277: (bsc#1112391)
  • CVE-2018-3162: (bsc#1112415)
  • CVE-2018-3173: (bsc#1112386)
  • CVE-2018-3200: (bsc#1112404)
  • CVE-2018-3284: (bsc#1112377)
• Update to MariaDB 10.2.18 GA:
  • CVE-2017-10320: (bsc#1064113)
  • CVE-2017-10365: (bsc#1064114)
  • CVE-2017-15365: (bsc#1072167)
  • CVE-2018-3058: (bsc#1101676)
  • CVE-2018-3063: (bsc#1101677)
  • CVE-2018-3064: (bsc#1103342)
  • CVE-2018-3066: (bsc#1101678)
  • CVE-2018-2759, CVE-2018-2777, CVE-2018-2786, CVE-2018-2810, CVE-2018-3060

Other issues fixed:

• Fixed an issue where mysl_install_db fails due to incorrect basedir (bsc#1127027).
• Fixed an issue where the lograte was not working (bsc#1112767).
• Remove xtrabackup dependency as MariaDB ships a build in mariabackup so xtrabackup is not needed (bsc#1122475).
• Fixed database corruption after renaming a prefix-indexed column (bsc#1120041).
• Remove PerconaFT from the package as it has AGPL licence (bsc#1118754).

The complete changelog can be found at: https://mariadb.com/kb/en/library/mariadb-10222-changelog/

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 5.5.61 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.23.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-61.html http://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-23.html http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html