MGASA-2019-0335 - Updated mariadb packages fix security vulnerabilities

Publication date: 19 Nov 2019
URL: https://advisories.mageia.org/MGASA-2019-0335.html
Type: security
Affected Mageia releases: 7
CVE: CVE-2019-2974,
     CVE-2019-2938

Updated mariadb packages fix security vulnerabilities:

A vulnerability in Server: Optimizer contains an easily exploitable
vulnerability allows low privileged attacker with network access via
multiple protocols to compromise the server. Successful attacks of this
vulnerability can result in unauthorized ability to cause a hang or
frequently repeatable crash (complete DOS) (CVE-2019-2974).

A vulnerability in InnoDB contains an Difficult to exploit vulnerability
allows high privileged attacker with network access via multiple protocols
to compromise the server. Successful attacks of this vulnerability can
result in unauthorized ability to cause a hang or frequently repeatable
crash (complete DOS) (CVE-2019-2938).

References:
- https://bugs.mageia.org/show_bug.cgi?id=25691
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2974
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2938

SRPMS:
- 7/core/mariadb-10.3.20-1.mga7