USN-4603-1: MariaDB vulnerabilities

Packages

mariadb-10.1 - MariaDB database
mariadb-10.3 - MariaDB database

Details

It was discovered that MariaDB didn’t properly validate the content of a packet
received from a server. A remote attacker could use this vulnerability to sent
a specialy crafted file to cause a denial of service. (CVE-2020-13249)

It was discovered that MariaDB has other security issues. An attacker can cause
a hang or frequently repeatable crash (denial of service). (CVE-2020-15180,
CVE-2020-2752, CVE-2020-2760, CVE-2020-2812, CVE-2020-2814)

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

It was discovered that MariaDB didn’t properly validate the content of a packet
received from a server. A remote attacker could use this vulnerability to sent
a specialy crafted file to cause a denial of service. (CVE-2020-13249)

It was discovered that MariaDB has other security issues. An attacker can cause
a hang or frequently repeatable crash (denial of service). (CVE-2020-15180,
CVE-2020-2752, CVE-2020-2760, CVE-2020-2812, CVE-2020-2814)

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Update instructions

This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart MariaDB to make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
20.04 focal	mariadb-server – 1:10.3.25-0ubuntu0.20.04.1
18.04 bionic	mariadb-server – 1:10.1.47-0ubuntu0.18.04.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

USN-4350-1

USN-4350-1

Packages

Details

Update instructions

Reduce your security exposure

References

Related notices