Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2020:1431-1 Critical: MariaDB-Connector-C Improper Validation

suse
Calendar Grey May 26, 2020
Dist Suse Esm H88
A new release for mariadb-connector-c addresses a significant security vulnerability, aimed at reducing potential threats on SUSE platforms.
An update that fixes one vulnerability is now available

Summary

This update for mariadb-connector-c fixes the following issues: Security issue fixed: - CVE-2020-13249: Fixed an improper validation of OK packets received from clients (bsc#1171550). Non-security issues fixed: - Update to release 3.1.8 (bsc#1171550) * CONC-304: Rename the static library to libmariadb.a and other libmariadb files in a consistent manner * CONC-441: Default user name for C/C is wrong if login user is different from effective user * CONC-449: Check $MARIADB_HOME/my.cnf in addition to $MYSQL_HOME/my.cnf * CONC-457: mysql_list_processes crashes in unpack_fields * CONC-458: mysql_get_timeout_value crashes when used improper * CONC-464: Fix static build for auth_gssapi_client plugin Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods

Topics%20covered

Topics Covered

security advisory critical DoS important SUSE mariadb-connector-c improper validation

References

#1171550

Cross- CVE-2020-13249

Affected Products:

SUSE Linux Enterprise Server 12-SP5

SUSE Linux Enterprise Server 12-SP4

https://www.suse.com/security/cve/CVE-2020-13249.html

https://bugzilla.suse.com/1171550

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:1431-1
Rating: important

Topics%20covered

Topics Covered

security advisory critical DoS important SUSE mariadb-connector-c improper validation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here