CVE-2019-18901

Name of the Vulnerable Software and Affected Versions mariadb versions prior to 10.2.31-3.25.1 on SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.26.1 on SUSE Linux Enterprise Server 15

Description A UNIX Symbolic Link (Symlink) Following issue in the mysql-systemd-helper of the mariadb packaging allows local attackers to change the permissions of arbitrary files to 0640.

Recommendations For mariadb versions prior to 10.2.31-3.25.1 on SUSE Linux Enterprise Server 12, update to version 10.2.31-3.25.1 or later. For mariadb versions prior to 10.2.31-3.26.1 on SUSE Linux Enterprise Server 15, update to version 10.2.31-3.26.1 or later.