Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 538
Alerts This Week
Warning Icon 1 538

Ubuntu 19.04: USN-4070-3 Critical: MariaDB Multiple Issues

ubuntu
Calendar Grey August 13, 2019
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-4081-2 highlights vulnerabilities resolved in MySQL impacting Ubuntu 20.04. Please adhere to the provided update guidelines.
Several security issues were fixed in MariaDB.

Summary

Several security issues were fixed in MariaDB.

Software Description:

- mariadb-10.3: MariaDB database

Details:

USN-4070-1 fixed multiple vulnerabilities in MySQL. This update provides the

corresponding fixes for CVE-2019-2737, CVE-2019-2739, CVE-2019-2740,

CVE-2019-2758, CVE-2019-2805, CVE-2019-2628, CVE-2019-2627, CVE-2019-2614 in

MariaDB 10.3.

Ubuntu 19.04 has been updated to MariaDB 10.3.17.

In addition to security fixes, the updated package contain bug fixes, new

features, and possibly incompatible changes.

Please see the following for more information:

https://mariadb.com/docs/release-notes/community-server/changelogs/changelogs-mariadb-10-3-series/mariadb-10317-changelog

https://mariadb.com/docs/release-notes/community-server/old-releases/release-notes-mariadb-10-3-series/mariadb-10317-release-notes

Original advisory details:

Multiple security issues were discovered in MySQL and this update includes

a new upstream MySQL version to fix these ...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  libmariadb-dev                  1:10.3.17-0ubuntu0.19.04.1
  libmariadb-dev-compat           1:10.3.17-0ubuntu0.19.04.1
  libmariadb3                     1:10.3.17-0ubuntu0.19.04.1
  libmariadbclient-dev            1:10.3.17-0ubuntu0.19.04.1
  libmariadbd-dev                 1:10.3.17-0ubuntu0.19.04.1
  libmariadbd19                   1:10.3.17-0ubuntu0.19.04.1
  mariadb-backup                  1:10.3.17-0ubuntu0.19.04.1
  mariadb-client                  1:10.3.17-0ubuntu0.19.04.1
  mariadb-client-10.3             1:10.3.17-0ubuntu0.19.04.1
  mariadb-client-core-10.3        1:10.3.17-0ubuntu0.19.04.1
  mariadb-common                  1:10.3.17-0ubuntu0.19.04.1
  mariadb-plugin-connect          1:10.3.17-0ubuntu0.19.04.1
  mariadb-plugin-cracklib-password-check  1:10.3.17-0ubuntu0.19.04.1
  mariadb-plugin-gssapi-client    1:10.3.17-0ubuntu0.19.04.1
  mariadb-plugin-gssapi-server    1:10.3.17-0ubuntu0.19.04.1
  mariadb-plugin-mroonga          1:10.3.17-0ubuntu0.19.04.1
  mariadb-plugin-oqgraph          1:10.3.17-0ubuntu0.19.04.1
  mariadb-plugin-rocksdb          1:10.3.17-0ubuntu0.19.04.1
  mariadb-plugin-spider           1:10.3.17-0ubuntu0.19.04.1
  mariadb-plugin-tokudb           1:10.3.17-0ubuntu0.19.04.1
  mariadb-server                  1:10.3.17-0ubuntu0.19.04.1
  mariadb-server-10.3             1:10.3.17-0ubuntu0.19.04.1
  mariadb-server-core-10.3        1:10.3.17-0ubuntu0.19.04.1
  mariadb-test                    1:10.3.17-0ubuntu0.19.04.1
  mariadb-test-data               1:10.3.17-0ubuntu0.19.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References

https://ubuntu.com/security/notices/USN-4070-3

https://ubuntu.com/security/notices/USN-4070-1

CVE-2019-2614, CVE-2019-2627, CVE-2019-2628, CVE-2019-2737,

CVE-2019-2739, CVE-2019-2740, CVE-2019-2758, CVE-2019-2805

Severity
critical
Lowest
Low
Medium
High
Critical

August 13, 2019

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.