MGASA-2019-0181 - Updated mariadb packages fix security vulnerability

Publication date: 19 May 2019
URL: https://advisories.mageia.org/MGASA-2019-0181.html
Type: security
Affected Mageia releases: 6
CVE: CVE-2019-2614,
     CVE-2019-2627

Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: Replication). Difficult to exploit vulnerability allows high
privileged attacker with network access via multiple protocols to
compromise MariaDB Server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) of MariaDB Server (CVE-2019-2614).

Vulnerability in the MariaDB Server component of MariaDB (subcomponent:
Server: Security: Privileges). Easily exploitable vulnerability allows
high privileged attacker with network access via multiple protocols to
compromise MariaDB Server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) of MariaDB Server (CVE-2019-2627).

References:
- https://bugs.mageia.org/show_bug.cgi?id=24743
- https://mariadb.com/kb/en/mariadb-10139-release-notes/
- https://www.oracle.com/security-alerts/cpuapr2019.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2614
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2627

SRPMS:
- 6/core/mariadb-10.1.39-1.mga6