Summary
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.
The following packages have been upgraded to a later upstream version: mariadb (10.3.17), galera (25.3.26). (BZ#1701687, BZ#1711265, BZ#1741358)
Security Fix(es):
* mysql: InnoDB unspecified vulnerability (CPU Jan 2019) (CVE-2019-2510)
* mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) (CVE-2019-2537)
* mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628)
* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737)
* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739)
* mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758)
* mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | asio-devel | 1.10.8-7.module_el8.6.0+2867+72759d2f |
| AlmaLinux · 8 | asio-devel | 1.10.8-7.module_el8.6.0+3072+3c630e87 |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.6.0+2867+72759d2f |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.3.0+2028+5e3224e9 |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.5.0+2632+14ced695 |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.6.0+2761+593e5e59 |
| AlmaLinux · 8 | Judy-devel | 1.0.5-18.module_el8.6.0+3072+3c630e87 |
| AlmaLinux · 8 | Judy-devel | 1.0.5-18.module_el8.6.0+2867+72759d2f |
| AlmaLinux · 8 | Judy-devel | 1.0.5-18.module_el8.3.0+2028+5e3224e9 |
Vulnerabilities 12
-
Low 3.7
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …
-
Low 3.7
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affecte…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affecte…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML). Supported versions that are af…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affecte…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are…
References
-
report
https://access.redhat.com/security/cve/CVE-2019-2510
-
report
https://access.redhat.com/security/cve/CVE-2019-2537
-
report
https://access.redhat.com/security/cve/CVE-2019-2614
-
report
https://access.redhat.com/security/cve/CVE-2019-2627
-
report
https://access.redhat.com/security/cve/CVE-2019-2628
-
report
https://access.redhat.com/security/cve/CVE-2019-2737
-
report
https://access.redhat.com/security/cve/CVE-2019-2739
-
report
https://access.redhat.com/security/cve/CVE-2019-2740
-
report
https://access.redhat.com/security/cve/CVE-2019-2758
-
report
https://access.redhat.com/security/cve/CVE-2019-2805
-
report
https://access.redhat.com/security/cve/CVE-2020-2922
-
report
https://access.redhat.com/security/cve/CVE-2021-2007
-
report
https://bugzilla.redhat.com/1657220
-
report
https://bugzilla.redhat.com/1659920
-
report
https://bugzilla.redhat.com/1666751
-
report
https://bugzilla.redhat.com/1666763
-
report
https://bugzilla.redhat.com/1686818
-
report
https://bugzilla.redhat.com/1687879
-
report
https://bugzilla.redhat.com/1693245
-
report
https://bugzilla.redhat.com/1702707
-
report
https://bugzilla.redhat.com/1702709
-
report
https://bugzilla.redhat.com/1702969
-
report
https://bugzilla.redhat.com/1702976
-
report
https://bugzilla.redhat.com/1702977
-
report
https://bugzilla.redhat.com/1731997
-
report
https://bugzilla.redhat.com/1731999
-
report
https://bugzilla.redhat.com/1732000
-
report
https://bugzilla.redhat.com/1732008
-
report
https://bugzilla.redhat.com/1732025
-
report
https://bugzilla.redhat.com/1835850
-
report
https://bugzilla.redhat.com/1922382
-
advisory
https://errata.almalinux.org/8/ALSA-2019-3708.html
-
report
https://vulners.com/cve/CVE-2019-2510
-
report
https://vulners.com/cve/CVE-2019-2537
-
report
https://vulners.com/cve/CVE-2019-2614
-
report
https://vulners.com/cve/CVE-2019-2627
-
report
https://vulners.com/cve/CVE-2019-2628
-
report
https://vulners.com/cve/CVE-2019-2737
-
report
https://vulners.com/cve/CVE-2019-2739