Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 32 FEDORA-2020-35f52d9370 Moderate: Galera Replication Issue

**MariaDB 10.4.13 , Galera 26.4.4 , MariaDB CONC/C 3.1.8** Release notes: https://mariadb.com/docs/release-notes/community-server/old-releases/release-notes-mariadb-10-4-series/mariadb-10413-release-notes https://mariadb.com/docs/release-notes/connectors/c/3.1/3.1.8. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-35f52d9370 2020-06-16 01:25:41.304833 --------------------------------------------------------------------------------Name : galera Product : Fedora 32 Version : 26.4.4 Release : 2.fc32 URL : https://mariadb.com/products/enterprise/galera-cluster/ Summary : Synchronous multi-master wsrep provider (replication engine) Description : Galera is a fast synchronous multi-master wsrep provider (replication engine) for transactional databases and similar applications. For more information about wsrep API see https://launchpad.net/wsrep. For a description of Galera replication engine see . --------------------------------------------------------------------------------Update Information: **MariaDB 10.4.13 , Galera 26.4.4 , MariaDB CONC/C 3.1.8** Release notes: https://mariadb.com/docs/release-notes/community-server/old-releases/release-notes-mariadb-10-4-series/mariadb-10413-release-notes https://mariadb.com/docs/release-notes/connectors/c/3.1/3.1.8 --------------------------------------------------------------------------------ChangeLog: * Mon Jun 8 2020 Michal Schorm - 26.4.4-2 - Second rebuild for Boost 1.73 * Fri Jun 5 2020 Michal Schorm - 26.4.4-1 - Rebase to 26.4.4 Resolves: rhbz#1546787 * Thu May 28 2020 Jonathan Wakely - 26.4.3-4 - Rebuilt for Boost 1.73 --------------------------------------------------------------------------------References: [ 1 ] Bug #1546787 - FTBFS: -Wp,-D_GLIBCXX_ASSERTIONS https://bugzilla.redhat.com/show_bug.cgi?id=1546787 [ 2 ] Bug #1830118 - CVE-2020-2752 CVE-2020-2760 CVE-2020-2812 CVE-2020-2814 mariadb: variousflaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1830118 [ 3 ] Bug #1839828 - CVE-2020-13249 mariadb-connector-c: Improper validation of content in a OK packet received from a client [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1839828 [ 4 ] Bug #1840649 - CVE-2020-2752 mariadb-connector-c: mysql: C API unspecified vulnerability (CPU Apr 2020) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1840649 [ 5 ] Bug #1843795 - CVE-2020-13249 mariadb: mariadb-connector-c: Improper validation of content in a OK packet received from server [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1843795 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-35f52d9370' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . The latest update to MariaDB for Fedora 32 resolves several identified problems, improving both the reliability and efficiency of data syncing processes. Full information available.. Galera Cluster,Fedora Security Update,Synchronous Multi-Master,Database Replication. . Severity: Important.LinuxSecurity.com Team

Jun 15, 2020 •Important Fedora