SUSE-SU-2019:0628-1

This update for mariadb, galera-3, mariadb-connector fixes the following issues:

Security vulnerabilities addressed for mariadb:

• CVE-2016-9843 [bsc#1013882]
• CVE-2018-3058 [bsc#1101676]
• CVE-2018-3060
• CVE-2018-3063 [bsc#1101677]
• CVE-2018-3064 [bsc#1103342]
• CVE-2018-3066 [bsc#1101678]
• CVE-2018-3143 [bsc#1112421]
• CVE-2018-3156 [bsc#1112417]
• CVE-2018-3162 [bsc#1112415]
• CVE-2018-3173 [bsc#1112386]
• CVE-2018-3174 [bsc#1112368]
• CVE-2018-3185 [bsc#1112384]
• CVE-2018-3200 [bsc#1112404]
• CVE-2018-3251 [bsc#1112397]
• CVE-2018-3277 [bsc#1112391]
• CVE-2018-3282 [bsc#1112432]
• CVE-2018-3284 [bsc#1112377]

Other bug fixes and changes for mariadb:

• update to 10.2.21 GA
  • MDEV-17589 - Stack-buffer-overflow with indexed varchar (utf8) field
  • MDEV-16987 - ALTER DATABASE possible in read-only mode (forbid ALTER DATABASE in readonly)
  • MDEV-17720 - slaveddlexecmode=IDEMPOTENT does not handle DROP DATABASE
  • MDEV-6453 - Assertion `inited==NONE || (inited==RND && scan)' failed in handler::harndinit(bool) with InnoDB, joins, AND/OR conditions
  • MDEV-18105 - Mariabackup fails to copy encrypted InnoDB system tablespace if LSN>4G
  • MDEV-18041 - Database corruption after renaming a prefix-indexed column [bsc#1120041]
  • MDEV-17470 - Orphan temporary files after interrupted ALTER cause InnoDB: Operating system error number 17 and eventual fatal error 71
  • MDEV-17833: ALTER TABLE is not enforcing prefix index size limit
  • MDEV-17989: InnoDB: Failing assertion: dicttf2isvalid(flags, flags2)
  • MDEV-17765: Locking bug fix for SPATIAL INDEX
  • MDEV-17923, MDEV-17904, MDEV-17938: Fixes for FULLTEXT INDEX
  • Fixes for regressions introduced in MariaDB Server 10.2.19 by the backup-safe TRUNCATE TABLE (MDEV-13564, innodbsafetruncate=ON) and innodbundologtruncate:
    • MDEV-17780, MDEV-17816, MDEV-17849, MDEV-17851, MDEV-17885
  • Several improvements to MariaDB Server and backup for dealing with encrypted or pagecompressed pages:
    • MDEV-12112: corruption in encrypted table may be overlooked
    • MDEV-17958: On little-endian systems, remove bug-compatible variant of innodbchecksumalgorithm=crc32
    • MDEV-17957: Make innodbchecksumalgorithm stricter for strict* values
    • MDEV-18025: Mariabackup fails to detect corrupted page_compressed=1 tables
  • release notes and changelog:
    • https://mariadb.com/kb/en/library/mariadb-10221-release-notes
    • https://mariadb.com/kb/en/library/mariadb-10221-changelog
    • https://mariadb.com/kb/en/library/mariadb-10220-release-notes
    • https://mariadb.com/kb/en/library/mariadb-10220-changelog
• remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
• Add patch to link against libatomic where necessary and use C++11 atomics instead of gcc built-in atomics
• update to 10.2.19 GA [bsc#1116686]
  • innodbsafetruncate system variable for a backup-safe TRUNCATE TABLE implementation that is based on RENAME, CREATE, DROP (MDEV-14717, MDEV-14585, MDEV-13564). Default value for this variable is ON. If you absolutely must use XtraBackup instead of Mariabackup, you can set it to OFF and restart the server
  • MDEV-17289: Multi-pass recovery fails to apply some redo log records
  • MDEV-17073: INSERT…ON DUPLICATE KEY UPDATE became more deadlock-prone
  • MDEV-17491: micro optimize pageidt
  • MDEV-13671: InnoDB should use case-insensitive column name comparisons like the rest of the server
  • Fixes for indexed virtual columns: MDEV-17215, MDEV-16980
  • MDEV-17433: Allow InnoDB start up with empty iblogfile0 from mariabackup --prepare
  • MDEV-12547: InnoDB FULLTEXT index has too strict innodbftresultcachelimit max limit
  • MDEV-17541: KILL QUERY during lock wait in FOREIGN KEY check causes hang
  • MDEV-17531: Crash in RENAME TABLE with FOREIGN KEY and FULLTEXT INDEX
  • MDEV-17532: Performanceschema reports wrong directory for the temporary files of ALTER TABLE…ALGORITHM=INPLACE
  • MDEV-17545: Predicate lock for SPATIAL INDEX should lock non-matching record
  • MDEV-17546: SPATIAL INDEX should not be allowed for FOREIGN KEY
  • MDEV-17548: Incorrect access to off-page column for indexed virtual column
  • MDEV-12023: Assertion failure sym_node->table != NULL on startup
  • MDEV-17230: encryptionkeyid from alter is ignored by encryption threads
  • release notes and changelog:
    • https://mariadb.com/kb/en/library/mariadb-10219-release-notes
    • https://mariadb.com/kb/en/library/mariadb-10219-changelog
• do not pack libmariadb.pc (packed in mariadb-connector-c)
• add 'Requires: libmariadb_plugins' to the mariadb-test subpackage in order to be able to test client plugins successfuly (bsc#1111859)
• don't remove debugkeymanagement.so anymore (bsc#1111858)
• update to 10.2.18 GA
  • MDEV-15511 - if available, stunnel can be used during Galera rsync SST
  • MDEV-16791 - mariabackup: Support DDL commands during backup
  • MDEV-13564 - Refuse MLOG_TRUNCATE in mariabackup
  • MDEV-16934 - add new system variable eqrangeindexdivelimit to speed up queries that new long nested IN lists. The default value, for backward compatibility, is 0 meaning 'unlimited'.
  • MDEV-13333 - errors on InnoDB lock conflict
  • Report all InnoDB redo log corruption
  • MDEV-17043 - Purge of indexed virtual columns may cause hang on table-rebuilding DDL
  • MDEV-16868 - corruption of InnoDB temporary tables
  • MDEV-16465 - Invalid (old?) table or database name or hang in hainnobase::deletetable and log semaphore wait upon concurrent DDL with foreign keys
  • release notes and changelog:
    • https://mariadb.com/kb/en/library/mariadb-10218-release-notes
    • https://mariadb.com/kb/en/library/mariadb-10218-changelog
• update to 10.2.17 GA
  • New variable innodblogoptimizeddl for avoiding delay due to page flushing and allowing concurrent backup
  • InnoDB updated to 5.7.23
  • MDEV-14637 - Fix hang due to DDL with FOREIGN KEY or persistent statistics
  • MDEV-15953 - Alter InnoDB Partitioned Table Moves Files (which were originally not in the datadir) to the datadir
  • MDEV-16515 - InnoDB: Failing assertion: ++retries < 10000 in file dict0dict.cc line 2737
  • MDEV-16809 - Allow full redo logging for ALTER TABLE
  • Temporary tables: MDEV-16713 - InnoDB hang with repeating log entry
  • indexed virtual columns: MDEV-15855 - Deadlock between purge thread and DDL statement
  • MDEV-16664 - Change the default to innodblockschedulealgorithm=fcfs
  • Galera: MDEV-15822 - WSREP: BF lock wait long for trx
  • release notes and changelog:
    • https://mariadb.com/kb/en/library/mariadb-10217-release-notes
    • https://mariadb.com/kb/en/library/mariadb-10217-changelog
• switch to libedit as control sequences were already fixed there so we don't have to avoid it (bsc#1098683)
• update to 10.2.16 GA
  • MDEV-13122: mariabackup now supports MyRocks
  • MDEV-13779 - InnoDB fails to shut down purge workers, causing hang
  • MDEV-16267 - Wrong INFORMATIONSCHEMA.INNODBBUFFERPAGE.\ TABLENAME
  • MDEV-13834 - Upgrade failure from 10.1 innodbencryptlog
  • MDEV-16283 - ALTER TABLE...DISCARD TABLESPACE still takes long on a large buffer pool
  • MDEV-16376 - ASAN: heap-use-after-free in gcol.innodbvirtualdebug
  • MDEV-15824 - innodbdefragment=ON trumps innodboptimizefulltextonly=ON in OPTIMIZE TABLE
  • MDEV-16124 - filrenametablespace() times out and crashes server during table-rebuilding ALTER TABLE
  • MDEV-16416 - Crash on IMPORT TABLESPACE of a ROWFORMAT=COMPRESSED table
  • MDEV-16456 - InnoDB error 'returned OS error 71' complains about wrong path
  • MDEV-13103 - Deal with pagecompressed page corruption
  • MDEV-16496 - Mariabackup: Implement --verbose option to instrument InnoDB log apply
  • MDEV-16087 - Inconsistent SELECT results when query cache is enabled
  • MDEV-15114 - ASAN heap-use-after-free in memheapdup or dfielddataisbinaryequal (fix for indexed virtual columns)
  • release notes and changelog:
    • https://mariadb.com/kb/en/library/mariadb-10216-release-notes
    • https://mariadb.com/kb/en/library/mariadb-10216-changelog
• pack wsrepsstrsync_wan file to galera subpackage

Bug fixes and changes for galera-3:

• update to 25.3.24:
  • A support for new certification key type was added to allow more relaxed certification rules for foreign key references (galera#491).
  • New status variables were added to display the number of open transactions and referenced client connections inside Galera provider (galera#492).
  • GCache was sometimes cleared unnecessarily on startup if the recovered state had smaller sequence number than the highest found from GCache. Now only entries with sequence number higher than recovery point will be cleared (galera#498).
  • Non-primary configuration is saved into grastate.dat only when if the node is in closing state (galera#499).
  • Exception from GComm was not always handled properly resulting in Galera to remain in half closed state. This was fixed by propagating the error condition appropriately to upper layers (galera#500).
  • A new status variable displaying the total weight of the cluster nodes was added (galera#501).
  • The value of pc.weight did not reflect the actual effective value after setting it via wsrepprovideroptions. This was fixed by making sure that the new value is taken into use before returning the control back to caller (galera#505, MDEV-11959)
  • Use of ECHD algorithms with old OpenSSL versions was enabled (galera#511).
  • Default port value is now used by garbd if the port is not explicitly given in cluster address (MDEV-15531).
  • Correct error handling for posix_fallocate().
  • Failed causal reads are retried during configuration changes.

Bug fixes and changes for mariadb-connector-c:

• New upstream version 3.0.6
  • MDEV-15263: FIx ISNUM() macro
  • CONC-297: local infile parameter must be unsigned int instead of mybool
  • CONC-329: change return value of internal socket functions from mybool to int
  • CONC-332: myauth doesn't read/update server ok packet
  • CONC-344: reset internal row counter
  • CONC-345: invalid heap use after free
  • CONC-346: Remove old cmake policies
  • fixed crash in mysqlselectdb if NULL parameter was provided
• New upstream version 3.0.5
  • CONC-336: Allow multiple initialization of client library
  • Fixed string to MYSQLTIME conversion (prepared statements)
  • CONC-334: Copy all members of MYSQLFIELD to internal statement structure
  • Fixed double free in dynamic column library
  • Added checks for corrupted packets in protocol
  • MDEV-15450: Added default connection attribute serverhost
  • CONC-326: fixed wrong openssl thread id callback
• New upstream version 3.0.4
  • Added option MYSQLOPTCANHANDLEEXPIREDPASSWORDS for mysqloptions()/mysqloptionsv():
  • New plugin configuration interface: The default configuration for a specific plugin can be specified via cmake parameter -DCLIENTPLUGIN${PLUGIN}=[DYNAMIC|STATIC|OFF].
  • Added support for linux abstract socket (MDEV-15655).
  • CONC-320: Added asynchronous/non-blocking support for OpenSSL and GnuTLS
  • CONC-294: Access violation in mysqlclose when using a connection plugin.
  • MDEV-14977: If built dynamically the oldpassword plugin could not be located due to wrong filename (must be mysqloldpassword.so instead of oldpassword.so).
  • CONC-315: If no default client character set was specified, the utf8 character set will be used by default (instead of setting the client character set to server character set)
  • CONC-317: Parsing of configuration file fails if key/value pairs contain white spaces.
  • CONC-322: Correct handling of EAGAIN and EINPROGRESS in internalconnect (socket) for non windows platforms.
  • CONC-323: mariadbstmtexecutedirect hangs forever if compression used.
  • CONC-324: Wrong codepage numbers for some collations.
  • CONC-326: sslthreadinit() uses wrong openssl threadid callback
• Drop libmysqlclient_r Provides from the -devel package. (bsc#1097938)