{"id":"SUSE-SU-2021:3836-1","summary":"Security update for mariadb","details":"This update for mariadb fixes the following issues:\n\n- Update to 10.4.22:\n- CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL (bsc#1192497).\n    \n- Add missing dependency to liblz4 to enable lz4 compression for INNODB (bsc#1186031).    \n","modified":"2026-03-11T07:18:19.105692Z","published":"2021-12-01T15:05:47Z","related":["CVE-2021-35604"],"upstream":["CVE-2021-35604"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213836-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186031"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192497"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-35604"}],"affected":[{"package":{"name":"mariadb","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","purl":"pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.22-3.22.1"}]}],"ecosystem_specific":{"binaries":[{"mariadb-tools":"10.4.22-3.22.1","mariadb":"10.4.22-3.22.1","libmariadbd-devel":"10.4.22-3.22.1","libmariadbd19":"10.4.22-3.22.1","mariadb-client":"10.4.22-3.22.1","mariadb-errormessages":"10.4.22-3.22.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3836-1.json"}}],"schema_version":"1.7.5"}