Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Ubuntu 18.04 LTS USN-4070-2 Critical: MariaDB Security Update

ubuntu
Calendar Grey August 12, 2019
Dist Ubuntu Esm H88
A collection of vulnerabilities in MariaDB has been addressed with a new update for Ubuntu 18.04 LTS. Find the full information here!
Several security issues were fixed in MariaDB

Summary

Several security issues were fixed in MariaDB

Software Description:

- mariadb-10.1: MariaDB database

Details:

USN-4070-1 fixed multiple vulnerabilities in MySQL. This update provides the

corresponding fixes for CVE-2019-2737, CVE-2019-2739, CVE-2019-2740,

CVE-2019-2805 in MariaDB 10.1.

Ubuntu 18.04 LTS has been updated to MariaDB 10.1.41.

In addition to security fixes, the updated package contain bug fixes, new

features, and possibly incompatible changes.

Please see the following for more information:

https://mariadb.com/docs/release-notes/community-server/changelogs/changelogs-mariadb-101-series/mariadb-10141-changelog

https://mariadb.com/docs/release-notes/community-server/old-releases/release-notes-mariadb-10-1-series/mariadb-10141-release-notes

Original advisory details:

Multiple security issues were discovered in MySQL and this update includes

a new upstream MySQL version to fix these issues.

Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 1...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue software update threat Ubuntu MariaDB

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  libmariadbclient-dev            1:10.1.41-0ubuntu0.18.04.1
  libmariadbclient-dev-compat     1:10.1.41-0ubuntu0.18.04.1
  libmariadbclient18              1:10.1.41-0ubuntu0.18.04.1
  libmariadbd-dev                 1:10.1.41-0ubuntu0.18.04.1
  libmariadbd18                   1:10.1.41-0ubuntu0.18.04.1
  mariadb-client                  1:10.1.41-0ubuntu0.18.04.1
  mariadb-client-10.1             1:10.1.41-0ubuntu0.18.04.1
  mariadb-client-core-10.1        1:10.1.41-0ubuntu0.18.04.1
  mariadb-common                  1:10.1.41-0ubuntu0.18.04.1
  mariadb-plugin-connect          1:10.1.41-0ubuntu0.18.04.1
  mariadb-plugin-cracklib-password-check  1:10.1.41-0ubuntu0.18.04.1
  mariadb-plugin-gssapi-client    1:10.1.41-0ubuntu0.18.04.1
  mariadb-plugin-gssapi-server    1:10.1.41-0ubuntu0.18.04.1
  mariadb-plugin-mroonga          1:10.1.41-0ubuntu0.18.04.1
  mariadb-plugin-oqgraph          1:10.1.41-0ubuntu0.18.04.1
  mariadb-plugin-spider           1:10.1.41-0ubuntu0.18.04.1
  mariadb-plugin-tokudb           1:10.1.41-0ubuntu0.18.04.1
  mariadb-server                  1:10.1.41-0ubuntu0.18.04.1
  mariadb-server-10.1             1:10.1.41-0ubuntu0.18.04.1
  mariadb-server-core-10.1        1:10.1.41-0ubuntu0.18.04.1
  mariadb-test                    1:10.1.41-0ubuntu0.18.04.1
  mariadb-test-data               1:10.1.41-0ubuntu0.18.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References

https://ubuntu.com/security/notices/USN-4070-2

https://ubuntu.com/security/notices/USN-4070-1

CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2805

Severity
critical
Lowest
Low
Medium
High
Critical

August 12, 2019

Topics%20covered

Topics Covered

security advisory security issue software update threat Ubuntu MariaDB

Package Information

https://launchpad.net/ubuntu/+source/mariadb-10.1/1:10.1.41-0ubuntu0.18.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.