Summary
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.
The following packages have been upgraded to a later upstream version: mariadb (10.3.28), galera (25.3.32).
Security Fix(es):
* mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user (CVE-2021-27928)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 23
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | asio-devel | 1.10.8-7.module_el8.6.0+2867+72759d2f |
| AlmaLinux · 8 | asio-devel | 1.10.8-7.module_el8.6.0+3072+3c630e87 |
| AlmaLinux · 8 | galera | 25.3.32-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.6.0+2867+72759d2f |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.3.0+2028+5e3224e9 |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.5.0+2632+14ced695 |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.6.0+2761+593e5e59 |
| AlmaLinux · 8 | Judy-devel | 1.0.5-18.module_el8.6.0+3072+3c630e87 |
| AlmaLinux · 8 | Judy-devel | 1.0.5-18.module_el8.6.0+2867+72759d2f |
| AlmaLinux · 8 | Judy-devel | 1.0.5-18.module_el8.3.0+2028+5e3224e9 |
| AlmaLinux · 8 | mariadb | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-backup | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-common | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-devel | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-embedded | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-embedded-devel | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-errmsg | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-gssapi-server | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-oqgraph-engine | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-server | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-server-galera | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-server-utils | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
| AlmaLinux · 8 | mariadb-test | 3:10.3.28-1.module_el8.3.0+2177+7adc332a |
Vulnerabilities 1
-
Unscored —
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, …