- Issued:
- 2020-11-30
- Updated:
- 2020-11-30
RHSA-2020:5246 - Important: rh-mariadb103-mariadb and rh-mariadb103-galera security update
Synopsis
Important: rh-mariadb103-mariadb and rh-mariadb103-galera security update
Type/Severity
Security Advisory Important
Topic
An update for rh-mariadb103-mariadb and rh-mariadb103-galera is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL.
The following packages have been upgraded to a later upstream version: rh-mariadb103-mariadb (10.3.27), rh-mariadb103-galera (25.3.31). (BZ#1894122, BZ#1894124)
Security Fix(es):
-
mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)
-
mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)
-
mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)
-
mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628)
-
mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737)
-
mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739)
-
mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740)
-
mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758)
-
mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805)
-
mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)
-
mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)
-
mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)
-
mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)
-
mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)
-
mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)
-
mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)
-
mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2922)
-
mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)
-
mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)
-
mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)
-
mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)
-
mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)
-
mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- mysqld_safe --dry-run doesn't work as expected (BZ#1894105)
Enhancement(s):
- [RFE] create separate package providing ha_connect.so plugin for mariadb-server in SCL (BZ#1894114)
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically.
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat Software Collections (for RHEL Workstation) | 1 | x86_64 |
| Red Hat Software Collections (for RHEL Server) | 1 | x86_64 |
| Red Hat Software Collections (for RHEL Server) | 1 | x86_64 |
| Red Hat Software Collections (for RHEL Server) | 1 | x86_64 |
| Red Hat Software Collections (for RHEL Server for System Z) | 1 | s390x |
| Red Hat Software Collections (for RHEL Server for System Z) | 1 | s390x |
| Red Hat Software Collections (for RHEL Server for System Z) | 1 | s390x |
| Red Hat Software Collections (for RHEL Server for IBM Power LE) | 1 | ppc64le |
| Red Hat Software Collections (for RHEL Server for IBM Power LE) | 1 | ppc64le |
| Red Hat Software Collections (for RHEL Server for IBM Power LE) | 1 | ppc64le |
| Red Hat Software Collections (for RHEL Server for ARM) | 1 | aarch64 |
Updated Packages
- rh-mariadb103-mariadb-config-syspaths-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-test-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-backup-syspaths-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-gssapi-server-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-connect-engine-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-server-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-backup-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-server-syspaths-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-server-utils-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-syspaths-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-errmsg-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-server-utils-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-server-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-config-syspaths-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-config-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-server-syspaths-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-devel-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-syspaths-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-connect-engine-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-syspaths-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-common-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-server-utils-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-config-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-syspaths-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-errmsg-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-config-syspaths-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-debuginfo-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-server-galera-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-test-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-galera-25.3.31-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-common-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-oqgraph-engine-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-test-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-common-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-oqgraph-engine-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-galera-25.3.31-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-server-utils-syspaths-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-galera-debuginfo-25.3.31-1.el7.s390x.rpm
- rh-mariadb103-galera-debuginfo-25.3.31-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-debuginfo-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-server-syspaths-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-gssapi-server-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-gssapi-server-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-errmsg-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-server-galera-syspaths-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-server-utils-syspaths-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-server-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-server-galera-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-galera-25.3.31-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-devel-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-connect-engine-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-config-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-10.3.27-1.el7.src.rpm
- rh-mariadb103-mariadb-backup-syspaths-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-server-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-backup-syspaths-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-common-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-errmsg-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-backup-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-server-galera-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-galera-25.3.31-1.el7.src.rpm
- rh-mariadb103-mariadb-server-galera-syspaths-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-devel-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-server-syspaths-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-connect-engine-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-test-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-server-utils-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-backup-syspaths-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-server-utils-syspaths-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-server-galera-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-debuginfo-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-oqgraph-engine-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-oqgraph-engine-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-server-galera-syspaths-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-galera-debuginfo-25.3.31-1.el7.x86_64.rpm
- rh-mariadb103-galera-debuginfo-25.3.31-1.el7.ppc64le.rpm
- rh-mariadb103-mariadb-server-galera-syspaths-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-gssapi-server-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-debuginfo-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-backup-10.3.27-1.el7.aarch64.rpm
- rh-mariadb103-mariadb-devel-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-config-10.3.27-1.el7.s390x.rpm
- rh-mariadb103-mariadb-backup-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-server-utils-syspaths-10.3.27-1.el7.x86_64.rpm
- rh-mariadb103-mariadb-config-syspaths-10.3.27-1.el7.ppc64le.rpm
- rh-mariadb103-galera-25.3.31-1.el7.s390x.rpm
Fixes
- This content is not included.BZ - 1702969
- This content is not included.BZ - 1702976
- This content is not included.BZ - 1702977
- This content is not included.BZ - 1731997
- This content is not included.BZ - 1731999
- This content is not included.BZ - 1732000
- This content is not included.BZ - 1732008
- This content is not included.BZ - 1732025
- This content is not included.BZ - 1764680
- This content is not included.BZ - 1764691
- This content is not included.BZ - 1798587
- This content is not included.BZ - 1830056
- This content is not included.BZ - 1830059
- This content is not included.BZ - 1830060
- This content is not included.BZ - 1830082
- This content is not included.BZ - 1835849
- This content is not included.BZ - 1835850
- This content is not included.BZ - 1839827
- This content is not included.BZ - 1890738
- This content is not included.BZ - 1890743
- This content is not included.BZ - 1890747
- This content is not included.BZ - 1890756
- This content is not included.BZ - 1894070
- This content is not included.BZ - 1894105
- This content is not included.BZ - 1894114
- This content is not included.BZ - 1894122
- This content is not included.BZ - 1894919
CVEs
- CVE-2019-2614
- CVE-2019-2627
- CVE-2019-2628
- CVE-2019-2737
- CVE-2019-2739
- CVE-2019-2740
- CVE-2019-2758
- CVE-2019-2805
- CVE-2019-2938
- CVE-2019-2974
- CVE-2020-2574
- CVE-2020-2752
- CVE-2020-2760
- CVE-2020-2780
- CVE-2020-2812
- CVE-2020-2814
- CVE-2020-2922
- CVE-2020-13249
- CVE-2020-14765
- CVE-2020-14776
- CVE-2020-14789
- CVE-2020-14812
- CVE-2020-15180
- CVE-2021-2007
- CVE-2021-2022
- CVE-2021-2144
- CVE-2021-2194
References
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.