ALSA-2020:5500 — Important: mariadb:10.3 security, bug fix, and enhancement update

Summary

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: mariadb (10.3.27), galera (25.3.31). (BZ#1899082, BZ#1899086)

Security Fix(es):

* mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

* mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

* mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

* mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

* mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

* mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

* mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

* mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

* mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* FTBFS: -D_GLIBCXX_ASSERTIONS (BZ#1899009)

* Queries with entity_id IN ('1', '2', …, '70000') run much slower in MariaDB 10.3 than on MariaDB 10.1 (BZ#1899017)

* Cleanup race with wsrep_rsync_sst_tunnel may prevent full galera cluster bootstrap (BZ#1899021)

* There are undeclared file conflicts in several mariadb and mysql packages (BZ#1899077)

Fixed packages 3

Release	Package	Fixed in
AlmaLinux · 8	Judy	1.0.5-18.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	Judy	1.0.5-18.module_el8.5.0+2632+14ced695
AlmaLinux · 8	Judy	1.0.5-18.module_el8.6.0+2761+593e5e59

Vulnerabilities 17

High 7.2

CVE-2021-2144

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Apr 22, 2021
Medium 6.5

CVE-2020-14765

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine

Oct 21, 2020
Medium 6.5

CVE-2020-2780

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Apr 15, 2020
Medium 5.9

CVE-2020-2574

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Jan 15, 2020
Medium 5.5

CVE-2020-2760

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Apr 15, 2020
Medium 5.3

CVE-2020-2752

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Apr 15, 2020
Medium 4.9

CVE-2020-14776

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine

Oct 21, 2020
Medium 4.9

CVE-2020-14789

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine

Oct 21, 2020
Medium 4.9

CVE-2020-14812

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are aff…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine

Oct 21, 2020
Medium 4.9

CVE-2020-2812

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions tha…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Apr 15, 2020
Medium 4.9

CVE-2020-2814

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Apr 15, 2020
Medium 4.9

CVE-2021-2194

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu

Apr 22, 2021
Medium 4.4

CVE-2021-2022

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu

Jan 20, 2021
Unscored —

CVE-2019-2938

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Oct 16, 2019
Unscored —

CVE-2019-2974

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Oct 16, 2019
Unscored —

CVE-2020-13249

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet rec…

mariadb-10.3 mariadb-10.1 mariadb-connector-c Ubuntu Alpine

May 20, 2020
Unscored —

CVE-2020-15180

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for c…

mariadb-10.3 mariadb-10.1 mariadb mariadb-10.5 Debian Ubuntu Alpine

May 27, 2021

References

report
https://bugzilla.redhat.com/1764680
report
https://bugzilla.redhat.com/1764691
report
https://bugzilla.redhat.com/1798587
report
https://bugzilla.redhat.com/1830056
report
https://bugzilla.redhat.com/1830059
report
https://bugzilla.redhat.com/1830060
report
https://bugzilla.redhat.com/1830082
report
https://bugzilla.redhat.com/1835849
report
https://bugzilla.redhat.com/1839827
report
https://bugzilla.redhat.com/1890738
report
https://bugzilla.redhat.com/1890743
report
https://bugzilla.redhat.com/1890747
report
https://bugzilla.redhat.com/1890756
report
https://bugzilla.redhat.com/1894919
report
https://bugzilla.redhat.com/1899009
report
https://bugzilla.redhat.com/1899017
report
https://bugzilla.redhat.com/1899021
report
https://bugzilla.redhat.com/1899082
report
https://bugzilla.redhat.com/1899086
report
https://bugzilla.redhat.com/1922389
report
https://bugzilla.redhat.com/1951749
report
https://bugzilla.redhat.com/1951764
advisory
https://errata.almalinux.org/8/ALSA-2020-5500.html
report
https://vulners.com/cve/CVE-2019-2938
report
https://vulners.com/cve/CVE-2019-2974
report
https://vulners.com/cve/CVE-2020-13249
report
https://vulners.com/cve/CVE-2020-14765
report
https://vulners.com/cve/CVE-2020-14776
report
https://vulners.com/cve/CVE-2020-14789
report
https://vulners.com/cve/CVE-2020-14812
report
https://vulners.com/cve/CVE-2020-15180
report
https://vulners.com/cve/CVE-2020-2574
report
https://vulners.com/cve/CVE-2020-2752
report
https://vulners.com/cve/CVE-2020-2760
report
https://vulners.com/cve/CVE-2020-2780
report
https://vulners.com/cve/CVE-2020-2812
report
https://vulners.com/cve/CVE-2020-2814
report
https://vulners.com/cve/CVE-2021-2022
report
https://vulners.com/cve/CVE-2021-2144

Important: mariadb:10.3 security, bug fix, and enhancement update

Summary

Fixed packages 3

Vulnerabilities 17

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are aff…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions tha…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet rec…

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for c…

References