This update for mariadb fixes the following issues:
* CVE-2023-22084: Fixed an easily exploitable vulnerability that allowed high
privileged attacker with network access via multiple protocols to compromise
MySQL Server (bsc#1217405).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.3
zypper in -t patch SUSE-2023-4907=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3
zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4907=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4907=1
* Galera for Ericsson 15 SP3
zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-ERICSSON-2023-4907=1
* SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3
zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4907=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP3
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4907=1
* SUSE Enterprise Storage 7.1
zypper in -t patch SUSE-Storage-7.1-2023-4907=1
* openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586)
* mariadb-test-debuginfo-10.5.23-150300.3.38.1
* mariadb-10.5.23-150300.3.38.1
* mariadb-test-10.5.23-150300.3.38.1
* mariadb-client-10.5.23-150300.3.38.1
* libmariadbd-devel-10.5.23-150300.3.38.1
* mariadb-debuginfo-10.5.23-150300.3.38.1
* mariadb-rpm-macros-10.5.23-150300.3.38.1
* libmariadbd19-10.5.23-150300.3.38.1
* mariadb-tools-debuginfo-10.5.23-150300.3.38.1
* mariadb-bench-debuginfo-10.5.23-150300.3.38.1
* mariadb-bench-10.5.23-150300.3.38.1
* libmariadbd19-debuginfo-10.5.23-150300.3.38.1
* mariadb-client-debuginfo-10.5.23-150300.3.38.1
* mariadb-debugsource-10.5.23-150300.3.38.1
* mariadb-tools-10.5.23-150300.3.38.1
* mariadb-galera-10.5.23-150300.3.38.1
* openSUSE Leap 15.3 (noarch)
* mariadb-errormessages-10.5.23-150300.3.38.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64
x86_64)
* mariadb-10.5.23-150300.3.38.1
* mariadb-tools-debuginfo-10.5.23-150300.3.38.1
* mariadb-client-10.5.23-150300.3.38.1
*...
Read the Full Advisory* bsc#1217405
## References:
* https://www.suse.com/security/cve/CVE-2023-22084.html
* https://bugzilla.suse.com/show_bug.cgi?id=1217405
Get the latest Linux and open source security news straight to your inbox.