Security update for mariadb

Announcement ID:	SUSE-SU-2022:2160-1
Rating:	important
References:	bsc#1198603 bsc#1198604 bsc#1198606 bsc#1198607 bsc#1198610 bsc#1198611 bsc#1198612 bsc#1198613 bsc#1198629 bsc#1199928
Cross-References:	CVE-2021-46669 CVE-2022-21427 CVE-2022-27377 CVE-2022-27378 CVE-2022-27380 CVE-2022-27381 CVE-2022-27383 CVE-2022-27384 CVE-2022-27386 CVE-2022-27387 CVE-2022-27445
CVSS scores:	CVE-2021-46669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-21427 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2022-27377 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-27377 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27378 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-27378 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27380 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-27380 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27381 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-27381 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27383 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-27383 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27384 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-27384 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27386 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-27386 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27387 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-27387 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-27445 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVE-2022-27445 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products:	SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9

An update that solves 11 vulnerabilities can now be installed.

Description:

This update for mariadb fixes the following issues:

• CVE-2021-46669 (bsc#1199928)
• CVE-2022-21427 (bsc#1199928)
• CVE-2022-27377 (bsc#1198603)
• CVE-2022-27378 (bsc#1198604)
• CVE-2022-27380 (bsc#1198606)
• CVE-2022-27381 (bsc#1198607)
• CVE-2022-27383 (bsc#1198610)
• CVE-2022-27384 (bsc#1198611)
• CVE-2022-27386 (bsc#1198612)
• CVE-2022-27387 (bsc#1198613)
• CVE-2022-27445 (bsc#1198629)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE OpenStack Cloud 9
  zypper in -t patch SUSE-OpenStack-Cloud-9-2022-2160=1
• SUSE OpenStack Cloud Crowbar 9
  zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-2160=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4
  zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-2160=1
• SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4
  zypper in -t patch SUSE-SLE-SERVER-12-SP4-ESPOS-2022-2160=1
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4
  zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-2160=1
• SUSE Linux Enterprise High Performance Computing 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-2160=1
• SUSE Linux Enterprise Server 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-2160=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-2160=1

Package List:

• SUSE OpenStack Cloud 9 (x86_64)
  • mariadb-galera-10.2.44-3.50.1
  • mariadb-client-10.2.44-3.50.1
  • mariadb-10.2.44-3.50.1
  • mariadb-client-debuginfo-10.2.44-3.50.1
  • mariadb-tools-debuginfo-10.2.44-3.50.1
  • mariadb-tools-10.2.44-3.50.1
  • mariadb-debugsource-10.2.44-3.50.1
  • mariadb-debuginfo-10.2.44-3.50.1
• SUSE OpenStack Cloud 9 (noarch)
  • mariadb-errormessages-10.2.44-3.50.1
• SUSE OpenStack Cloud Crowbar 9 (x86_64)
  • mariadb-galera-10.2.44-3.50.1
  • mariadb-client-10.2.44-3.50.1
  • mariadb-10.2.44-3.50.1
  • mariadb-client-debuginfo-10.2.44-3.50.1
  • mariadb-tools-debuginfo-10.2.44-3.50.1
  • mariadb-tools-10.2.44-3.50.1
  • mariadb-debugsource-10.2.44-3.50.1
  • mariadb-debuginfo-10.2.44-3.50.1
• SUSE OpenStack Cloud Crowbar 9 (noarch)
  • mariadb-errormessages-10.2.44-3.50.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4 (ppc64le x86_64)
  • mariadb-client-10.2.44-3.50.1
  • mariadb-10.2.44-3.50.1
  • mariadb-client-debuginfo-10.2.44-3.50.1
  • mariadb-tools-debuginfo-10.2.44-3.50.1
  • mariadb-tools-10.2.44-3.50.1
  • mariadb-debugsource-10.2.44-3.50.1
  • mariadb-debuginfo-10.2.44-3.50.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4 (noarch)
  • mariadb-errormessages-10.2.44-3.50.1
• SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (aarch64 x86_64)
  • mariadb-client-10.2.44-3.50.1
  • mariadb-10.2.44-3.50.1
  • mariadb-client-debuginfo-10.2.44-3.50.1
  • mariadb-tools-debuginfo-10.2.44-3.50.1
  • mariadb-tools-10.2.44-3.50.1
  • mariadb-debugsource-10.2.44-3.50.1
  • mariadb-debuginfo-10.2.44-3.50.1
• SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (noarch)
  • mariadb-errormessages-10.2.44-3.50.1
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (aarch64 ppc64le s390x x86_64)
  • mariadb-client-10.2.44-3.50.1
  • mariadb-10.2.44-3.50.1
  • mariadb-client-debuginfo-10.2.44-3.50.1
  • mariadb-tools-debuginfo-10.2.44-3.50.1
  • mariadb-tools-10.2.44-3.50.1
  • mariadb-debugsource-10.2.44-3.50.1
  • mariadb-debuginfo-10.2.44-3.50.1
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (noarch)
  • mariadb-errormessages-10.2.44-3.50.1
• SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)
  • mariadb-client-10.2.44-3.50.1
  • mariadb-10.2.44-3.50.1
  • mariadb-client-debuginfo-10.2.44-3.50.1
  • mariadb-tools-debuginfo-10.2.44-3.50.1
  • mariadb-tools-10.2.44-3.50.1
  • mariadb-debugsource-10.2.44-3.50.1
  • mariadb-debuginfo-10.2.44-3.50.1
• SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch)
  • mariadb-errormessages-10.2.44-3.50.1
• SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)
  • mariadb-client-10.2.44-3.50.1
  • mariadb-10.2.44-3.50.1
  • mariadb-client-debuginfo-10.2.44-3.50.1
  • mariadb-tools-debuginfo-10.2.44-3.50.1
  • mariadb-tools-10.2.44-3.50.1
  • mariadb-debugsource-10.2.44-3.50.1
  • mariadb-debuginfo-10.2.44-3.50.1
• SUSE Linux Enterprise Server 12 SP5 (noarch)
  • mariadb-errormessages-10.2.44-3.50.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)
  • mariadb-client-10.2.44-3.50.1
  • mariadb-10.2.44-3.50.1
  • mariadb-client-debuginfo-10.2.44-3.50.1
  • mariadb-tools-debuginfo-10.2.44-3.50.1
  • mariadb-tools-10.2.44-3.50.1
  • mariadb-debugsource-10.2.44-3.50.1
  • mariadb-debuginfo-10.2.44-3.50.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch)
  • mariadb-errormessages-10.2.44-3.50.1

References:

• https://www.suse.com/security/cve/CVE-2021-46669.html
• https://www.suse.com/security/cve/CVE-2022-21427.html
• https://www.suse.com/security/cve/CVE-2022-27377.html
• https://www.suse.com/security/cve/CVE-2022-27378.html
• https://www.suse.com/security/cve/CVE-2022-27380.html
• https://www.suse.com/security/cve/CVE-2022-27381.html
• https://www.suse.com/security/cve/CVE-2022-27383.html
• https://www.suse.com/security/cve/CVE-2022-27384.html
• https://www.suse.com/security/cve/CVE-2022-27386.html
• https://www.suse.com/security/cve/CVE-2022-27387.html
• https://www.suse.com/security/cve/CVE-2022-27445.html
• https://bugzilla.suse.com/show_bug.cgi?id=1198603
• https://bugzilla.suse.com/show_bug.cgi?id=1198604
• https://bugzilla.suse.com/show_bug.cgi?id=1198606
• https://bugzilla.suse.com/show_bug.cgi?id=1198607
• https://bugzilla.suse.com/show_bug.cgi?id=1198610
• https://bugzilla.suse.com/show_bug.cgi?id=1198611
• https://bugzilla.suse.com/show_bug.cgi?id=1198612
• https://bugzilla.suse.com/show_bug.cgi?id=1198613
• https://bugzilla.suse.com/show_bug.cgi?id=1198629
• https://bugzilla.suse.com/show_bug.cgi?id=1199928