RHSA-2019:2327 — Red Hat Security Advisory: mariadb security and bug fix update

Fixed packages 36

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-bench	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-debuginfo	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-devel	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-embedded	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-embedded-devel	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-libs	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-server	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	mariadb-test	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-bench	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-debuginfo	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-devel	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-embedded	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-embedded-devel	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-libs	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-server	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	mariadb-test	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-bench	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-debuginfo	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-devel	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-embedded	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-embedded-devel	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-libs	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-server	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	mariadb-test	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-bench	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-debuginfo	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-devel	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-embedded	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-embedded-devel	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-libs	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-server	1:5.5.64-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	mariadb-test	1:5.5.64-1.el7

Vulnerabilities 11

Medium 5.9

CVE-2021-2011

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 20, 2021
Medium 5.3

CVE-2020-14550

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jul 15, 2020
Unscored —

CVE-2018-3058

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affecte…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Jul 18, 2018
Unscored —

CVE-2018-3063

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

Oracle MySQL Server mysql-5.5 mariadb-10.0 Ubuntu Alpine

Jul 18, 2018
Unscored —

CVE-2018-3066

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that ar…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Jul 18, 2018
Unscored —

CVE-2018-3081

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that ar…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Jul 18, 2018
Unscored —

CVE-2018-3282

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Oct 17, 2018
Unscored —

CVE-2019-2503

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported vers…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 16, 2019
Unscored —

CVE-2019-2529

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Jan 16, 2019
Unscored —

CVE-2019-2614

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Apr 23, 2019
Unscored —

CVE-2019-2627

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Apr 23, 2019

References

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
report
https://bugzilla.redhat.com/show_bug.cgi?id=1490398
report
https://bugzilla.redhat.com/show_bug.cgi?id=1598095
report
https://bugzilla.redhat.com/show_bug.cgi?id=1602356
report
https://bugzilla.redhat.com/show_bug.cgi?id=1602363
report
https://bugzilla.redhat.com/show_bug.cgi?id=1602366
report
https://bugzilla.redhat.com/show_bug.cgi?id=1602424
report
https://bugzilla.redhat.com/show_bug.cgi?id=1625196
report
https://bugzilla.redhat.com/show_bug.cgi?id=1640322
report
https://bugzilla.redhat.com/show_bug.cgi?id=1666749
report
https://bugzilla.redhat.com/show_bug.cgi?id=1666755
report
https://bugzilla.redhat.com/show_bug.cgi?id=1678662
report
https://bugzilla.redhat.com/show_bug.cgi?id=1702969
report
https://bugzilla.redhat.com/show_bug.cgi?id=1702976
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2327.json
report
https://access.redhat.com/security/cve/CVE-2018-3058
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3058
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3058
article
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
report
https://access.redhat.com/security/cve/CVE-2018-3063
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3063
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3063
report
https://access.redhat.com/security/cve/CVE-2018-3066
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3066
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3066
report
https://access.redhat.com/security/cve/CVE-2018-3081
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3081
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3081
report
https://access.redhat.com/security/cve/CVE-2018-3282
advisory
https://www.cve.org/CVERecord?id=CVE-2018-3282
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3282
article
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
report
https://access.redhat.com/security/cve/CVE-2019-2503
advisory
https://www.cve.org/CVERecord?id=CVE-2019-2503
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-2503
article
http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
report
https://access.redhat.com/security/cve/CVE-2019-2529
advisory
https://www.cve.org/CVERecord?id=CVE-2019-2529

Red Hat Security Advisory: mariadb security and bug fix update

Fixed packages 36

Vulnerabilities 11

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affecte…

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that ar…

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that ar…

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions…

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported vers…

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that …

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

References