Ubuntu Security Notices
USN-4250-2

USN-4250-2: MariaDB vulnerability

Publication date

6 February 2020

Overview

MariaDB clients could be made to crash if they received specially crafted input.

Releases

19.10 18.04 LTS

Packages

mariadb-10.1 - MariaDB database
mariadb-10.3 - MariaDB database

Details

It was discovered that an unspecified vulnerability existed in the C API
component of MariaDB. An attacker could use this to cause a denial of
service for MariaDB clients.

MariaDB has been updated to 10.3.22 in Ubuntu 19.10 and 10.1.44 in
Ubuntu 18.04 LTS.

In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.

It was discovered that an unspecified vulnerability existed in the C API
component of MariaDB. An attacker could use this to cause a denial of
service for MariaDB clients.

MariaDB has been updated to 10.3.22 in Ubuntu 19.10 and 10.1.44 in
Ubuntu 18.04 LTS.

In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.

Update instructions

This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
19.10 eoan	libmariadb3 – 1:10.3.22-0ubuntu0.19.10.1
	libmariadbd19 – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-client – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-client-10.3 – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-client-core-10.3 – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-common – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-plugin-connect – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-plugin-cracklib-password-check – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-plugin-gssapi-client – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-plugin-gssapi-server – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-plugin-mroonga – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-plugin-oqgraph – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-plugin-rocksdb – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-plugin-spider – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-plugin-tokudb – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-server – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-server-10.3 – 1:10.3.22-0ubuntu0.19.10.1
	mariadb-server-core-10.3 – 1:10.3.22-0ubuntu0.19.10.1
18.04 bionic	libmariadbclient18 – 1:10.1.44-0ubuntu0.18.04.1
	libmariadbd18 – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-client – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-client-10.1 – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-client-core-10.1 – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-common – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-plugin-connect – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-plugin-cracklib-password-check – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-plugin-gssapi-client – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-plugin-gssapi-server – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-plugin-mroonga – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-plugin-oqgraph – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-plugin-spider – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-plugin-tokudb – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-server – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-server-10.1 – 1:10.1.44-0ubuntu0.18.04.1
	mariadb-server-core-10.1 – 1:10.1.44-0ubuntu0.18.04.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2020-2574

USN-4250-1

USN-4250-1