{"schemaVersion":3,"id":"SUSE-SU-2020:3625-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for mariadb\n\nThis update for mariadb includes the following fixes:\n\nSecurity fixes included in this update:\n\n- CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-2812: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-2814: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-2760: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-13249: Fixed an improper validation of the content of an OK packet received from a server.\n- CVE-2020-14812: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-14765: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-14776: Fixed an issue which could have resulted in unauthorized ability of accessing data.\n- CVE-2020-14789: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.\n- CVE-2020-15180: Fixed an issue in Galera which could have led to remote code execution.\n\n\nNon Security fixes included in this update:\n\n- Update to 10.2.36 GA [bsc#1177472] and [bsc#1178428]\n  * release notes and changelog:\n    https://mariadb.com/kb/en/library/mariadb-10236-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10236-changelog\n    https://mariadb.com/kb/en/library/mariadb-10235-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10235-changelog\n    https://mariadb.com/kb/en/library/mariadb-10234-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10234-changelog\n  * fixes for the following security vulnerabilities:\n    10.2.36: none\n    10.2.35: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,\n             CVE-2020-14789\n    10.2.34: CVE-2020-15180\n- update suse_skipped_tests.list\n\n- Update to 10.2.33 GA [bsc#1175596]\n  * release notes and changelog:\n    https://mariadb.com/kb/en/library/mariadb-10233-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10233-changelog\n  * fixes for the following security vulnerabilities: none\n- refresh mariadb-10.2.4-fortify-and-O.patch\n- tune the testsuite to avoid randomly failing tests\n- update suse_skipped_tests.list\n\n- Update to 10.2.32 GA [bsc#1171550]\n  * Fixes for the following security vulnerabilities:\n    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,\n    CVE-2020-13249\n  * release notes and changelog:\n    https://mariadb.com/kb/en/library/mariadb-10232-release-notes\n    https://mariadb.com/kb/en/library/mariadb-10232-changelog\n- refresh mariadb-10.2.4-fortify-and-O.patch\n- drop specfile 'hacks' as things work correctly in upstream now:\n  * renaming tmpfiles.conf -> mariadb.conf\n  * installing pam_user_map.so to /lib64/security for non 32bit\n    architectures\n  * sysusers.conf was renamed to mariadb.conf\n- update suse_skipped_tests.list","dates":{"published":"2020-12-04T11:52:48.000Z","modified":"2026-02-04T03:41:47.556Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"mariadb&distro=SUSE OpenStack Cloud 7","name":"mariadb","label":"mariadb&distro=SUSE OpenStack Cloud 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/mariadb&distro=SUSE OpenStack Cloud 7","purlType":"rpm","versions":[{"text":"< 10.2.36-19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.2.36-19.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203625-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20203625-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1171550","label":"bugzilla.suse.com/1171550","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1175596","label":"bugzilla.suse.com/1175596","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1177472","label":"bugzilla.suse.com/1177472","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1178428","label":"bugzilla.suse.com/1178428","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13249","label":"www.suse.com/security/cve/CVE-2020-13249","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14765","label":"www.suse.com/security/cve/CVE-2020-14765","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14776","label":"www.suse.com/security/cve/CVE-2020-14776","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14789","label":"www.suse.com/security/cve/CVE-2020-14789","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14812","label":"www.suse.com/security/cve/CVE-2020-14812","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15180","label":"www.suse.com/security/cve/CVE-2020-15180","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2752","label":"www.suse.com/security/cve/CVE-2020-2752","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2760","label":"www.suse.com/security/cve/CVE-2020-2760","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2812","label":"www.suse.com/security/cve/CVE-2020-2812","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2814","label":"www.suse.com/security/cve/CVE-2020-2814","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2020-13249","CVE-2020-14765","CVE-2020-14776","CVE-2020-14789","CVE-2020-14812","CVE-2020-15180","CVE-2020-2752","CVE-2020-2760","CVE-2020-2812","CVE-2020-2814"],"downstream":[],"duplicates":[],"related":["CVE-2020-13249","CVE-2020-14765","CVE-2020-14776","CVE-2020-14789","CVE-2020-14812","CVE-2020-15180","CVE-2020-2752","CVE-2020-2760","CVE-2020-2812","CVE-2020-2814"]},"timeline":[{"kind":"published","date":"2020-12-04T11:52:48.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:41:47.556Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T18:01:51.496Z","stale":false,"partial":false}}