[SECURITY] Fedora 32 Update: mariadb-10.4.13-1.fc32
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-35f52d9370
2020-06-16 01:25:41.304833
--------------------------------------------------------------------------------
Name : mariadb
Product : Fedora 32
Version : 10.4.13
Release : 1.fc32
URL : http://mariadb.org
Summary : A very fast and robust SQL database server
Description :
MariaDB is a community developed branch of MySQL - a multi-user, multi-threaded
SQL database server. It is a client/server implementation consisting of
a server daemon (mysqld) and many different client programs and libraries.
The base package contains the standard MariaDB/MySQL client programs and
generic MySQL files.
--------------------------------------------------------------------------------
Update Information:
**MariaDB 10.4.13 , Galera 26.4.4 , MariaDB CONC/C 3.1.8** Release notes:
https://mariadb.com/kb/en/mariadb-10413-release-notes/
https://mariadb.com/kb/en/mariadb-connector-c-318-release-notes/
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 5 2020 Michal Schorm <mschorm(a)redhat.com> - 10.4.13-1
- Rebase to 10.4.13
* Sun May 24 2020 Lukas Javorsky <ljavorsk(a)redhat.com> - 3:10.4.12-6
- Remove mariadb_rpl.h from includedir to prevent conflict with connector-c's
libraries
* Thu Apr 2 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 3:10.4.12-5
- Fix string quoting for rpm >= 4.16
* Thu Mar 26 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 10.4.12-4
- Add perl dependencies needed for tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1546787 - FTBFS: -Wp,-D_GLIBCXX_ASSERTIONS
https://bugzilla.redhat.com/show_bug.cgi?id=1546787
[ 2 ] Bug #1830118 - CVE-2020-2752 CVE-2020-2760 CVE-2020-2812 CVE-2020-2814 mariadb:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1830118
[ 3 ] Bug #1839828 - CVE-2020-13249 mariadb-connector-c: Improper validation of content
in a OK packet received from a client [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1839828
[ 4 ] Bug #1840649 - CVE-2020-2752 mariadb-connector-c: mysql: C API unspecified
vulnerability (CPU Apr 2020) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1840649
[ 5 ] Bug #1843795 - CVE-2020-13249 mariadb: mariadb-connector-c: Improper validation of
content in a OK packet received from server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1843795
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-35f52d9370' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------