ALSA-2022:1556 — Moderate: mariadb:10.3 security and bug fix update

Summary

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: mariadb (10.3.32), galera (25.3.34). (BZ#2050543)

Security Fix(es):

* mysql: Server: DML unspecified vulnerability (CPU Apr 2021) (CVE-2021-2154)

* mysql: Server: DML unspecified vulnerability (CPU Apr 2021) (CVE-2021-2166)

* mysql: InnoDB unspecified vulnerability (CPU Jul 2021) (CVE-2021-2372)

* mysql: InnoDB unspecified vulnerability (CPU Jul 2021) (CVE-2021-2389)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2021) (CVE-2021-35604)

* mariadb: Integer overflow in sql_lex.cc integer leading to crash (CVE-2021-46667)

* mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref (CVE-2021-46657)

* mariadb: save_window_function_values triggers an abort during IN subquery (CVE-2021-46658)

* mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries (CVE-2021-46662)

* mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause (CVE-2021-46666)

* mariadb: No password masking in audit log when using ALTER USER <user> IDENTIFIED BY <password> command (BZ#1981332)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* mariadb:10.3/mariadb: /etc/security/user_map.conf getting overwritten with mariadb-server upgrade (BZ#2050514)

* MariaDB logrotate leads to "gzip: stdin: file size changed while zipping" (BZ#2050532)

* Crash: WSREP: invalid state ROLLED_BACK (FATAL) (BZ#2050533)

* Galera doesn't work without 'procps-ng' package MariaDB-10.3 (BZ#2050550)

Fixed packages 31

Release	Package	Fixed in
AlmaLinux · 8	galera	25.3.34-4.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	galera	25.3.34-4.module_el8.5.0+2632+14ced695
AlmaLinux · 8	Judy	1.0.5-18.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	Judy	1.0.5-18.module_el8.5.0+2632+14ced695
AlmaLinux · 8	Judy	1.0.5-18.module_el8.6.0+2761+593e5e59
AlmaLinux · 8	mariadb	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-backup	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-backup	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-common	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-common	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-devel	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-devel	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-embedded	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-embedded	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-embedded-devel	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-embedded-devel	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-errmsg	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-errmsg	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-gssapi-server	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-gssapi-server	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-oqgraph-engine	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-oqgraph-engine	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-server	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-server	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-server-galera	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-server-galera	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-server-utils	3:10.3.32-2.module_el8.6.0+2867+72759d2f
AlmaLinux · 8	mariadb-server-utils	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-test	3:10.3.32-2.module_el8.5.0+2632+14ced695
AlmaLinux · 8	mariadb-test	3:10.3.32-2.module_el8.6.0+2867+72759d2f

Vulnerabilities 14

Medium 5.9

CVE-2021-2389

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine

Jul 20, 2021
Medium 5.5

CVE-2021-35604

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine

Oct 20, 2021
Medium 5.3

CVE-2022-31621

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occur…

mariadb mariadb-10.5 Debian Alpine

May 25, 2022
Medium 4.9

CVE-2021-2154

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine

Apr 22, 2021
Medium 4.9

CVE-2021-2166

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine

Apr 22, 2021
Medium 4.4

CVE-2021-2372

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine

Jul 20, 2021
Medium 4.4

CVE-2022-21451

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Apr 19, 2022
Unscored —

CVE-2021-46657

get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.

mariadb-10.3 mariadb-10.5 mariadb Debian Ubuntu Azure Linux

Jan 29, 2022
Unscored —

CVE-2021-46658

save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_…

mariadb-10.3 mariadb-10.5 mariadb Debian Ubuntu Azure Linux

Jan 29, 2022
Unscored —

CVE-2021-46662

MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction wit…

mariadb-10.3 mariadb mariadb-10.5 mariadb Debian Ubuntu Azure Linux Alpine

Feb 1, 2022
Unscored —

CVE-2021-46666

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE …

mariadb-10.3 mariadb-10.6 mariadb-10.5 mariadb Debian Ubuntu Azure Linux

Feb 1, 2022
Unscored —

CVE-2021-46667

MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.

mariadb-10.3 mariadb mariadb-10.5 mariadb Debian Ubuntu Azure Linux Alpine

Feb 1, 2022
Unscored —

CVE-2022-27385

An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and bel…

mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb Debian Ubuntu Alpine

Apr 12, 2022
Unscored —

CVE-2022-31624

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c m…

mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb Debian Ubuntu Alpine

May 25, 2022

References

report
https://access.redhat.com/security/cve/CVE-2022-21451
report
https://access.redhat.com/security/cve/CVE-2022-27385
report
https://access.redhat.com/security/cve/CVE-2022-31621
report
https://access.redhat.com/security/cve/CVE-2022-31624
report
https://bugzilla.redhat.com/1951752
report
https://bugzilla.redhat.com/1951755
report
https://bugzilla.redhat.com/1981332
report
https://bugzilla.redhat.com/1992303
report
https://bugzilla.redhat.com/1992309
report
https://bugzilla.redhat.com/2016101
report
https://bugzilla.redhat.com/2049294
report
https://bugzilla.redhat.com/2049305
report
https://bugzilla.redhat.com/2050019
report
https://bugzilla.redhat.com/2050028
report
https://bugzilla.redhat.com/2050030
report
https://bugzilla.redhat.com/2050514
report
https://bugzilla.redhat.com/2050532
report
https://bugzilla.redhat.com/2050533
report
https://bugzilla.redhat.com/2050543
report
https://bugzilla.redhat.com/2050550
report
https://bugzilla.redhat.com/2075001
report
https://bugzilla.redhat.com/2082651
report
https://bugzilla.redhat.com/2092353
report
https://bugzilla.redhat.com/2092362
advisory
https://errata.almalinux.org/8/ALSA-2022-1556.html
report
https://vulners.com/cve/CVE-2021-2154
report
https://vulners.com/cve/CVE-2021-2166
report
https://vulners.com/cve/CVE-2021-2372
report
https://vulners.com/cve/CVE-2021-2389
report
https://vulners.com/cve/CVE-2021-35604
report
https://vulners.com/cve/CVE-2021-46657
report
https://vulners.com/cve/CVE-2021-46658
report
https://vulners.com/cve/CVE-2021-46662
report
https://vulners.com/cve/CVE-2021-46666
report
https://vulners.com/cve/CVE-2021-46667
report
https://vulners.com/cve/CVE-2022-21451
report
https://vulners.com/cve/CVE-2022-27385

Moderate: mariadb:10.3 security and bug fix update

Summary

Fixed packages 31

Vulnerabilities 14

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occur…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.

save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_…

MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction wit…

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE …

MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.

An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and bel…

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c m…

References