Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

openSUSE Leap 15.6 SUSE-SU-2024:1922-1 Moderate: mariadb104 Network Breach

suse
Calendar Grey June 4, 2024
Dist Suse Esm H88
A routine security patch for mariadb104 fixes a connectivity vulnerability associated with CVE-2023-22084 on openSUSE Leap 15.6.
* bsc#1217405 Cross-References: * CVE-2023-22084

Summary

## This update for mariadb104 fixes the following issues: * Update to 10.4.33: * CVE-2023-22084: Fixed a bug that allowed high privileged attackers with network access via multiple protocols to compromise the server. (bsc#1217405) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-1922=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * mariadb104-debuginfo-10.4.33-150100.3.8.1 * mariadb104-bench-debuginfo-10.4.33-150100.3.8.1 * mariadb104-10.4.33-150100.3.8.1 * mariadb104-bench-10.4.33-150100.3.8.1 * mariadb104-client-debuginfo-10.4.33-150100.3.8.1

Topics%20covered

Topics Covered

security advisory moderate security update patch network breach openSUSE mariadb104

References

* bsc#1217405

Cross-

* CVE-2023-22084

CVSS scores:

* CVE-2023-22084 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-22084 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* openSUSE Leap 15.6

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2023-22084.html

* https://bugzilla.suse.com/show_bug.cgi?id=1217405

Announcement ID: SUSE-SU-2024:1922-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security update patch network breach openSUSE mariadb104

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here