Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 18.04 LTS: USN-3957-3 Moderate: MariaDB Security Fixes

ubuntu
Calendar Grey June 5, 2019
Dist Ubuntu Esm H88
Multiple vulnerabilities in PostgreSQL were addressed through Ubuntu 20.04 patches, improving overall system defense and reliability.
Several security issues were fixed in MariaDB.

Summary

Several security issues were fixed in MariaDB.

Software Description:

- mariadb-10.1: MariaDB database

Details:

USN-3957-1 fixed multiple vulnerabilities in MySQL. This update

provides the

corresponding fixes for CVE-2019-2614 and CVE-2019-2627 in MariaDB

10.1.

Ubuntu 18.04 LTS has been updated to MariaDB 10.1.40.

In addition to security fixes, the updated package contain bug fixes,

new

features, and possibly incompatible changes.

Please see the following for more information:

https://mariadb.com/docs/release-notes/community-server/changelogs/changelogs-mariadb-101-series/mariadb-10140-changelog

https://mariadb.com/docs/release-notes/community-server/old-releases/release-notes-mariadb-10-1-series/mariadb-10140-release-notes

Original advisory details:

Multiple security issues were discovered in MySQL and this update

includes

a new upstream MySQL version to fix these issues.

Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04

h...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  mariadb-server                  1:10.1.40-0ubuntu0.18.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References

https://ubuntu.com/security/notices/USN-3957-3

https://ubuntu.com/security/notices/USN-3957-1

CVE-2019-2614, CVE-2019-2627

June 05, 2019

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.