Red Hat Security Advisory: rh-mariadb102-mariadb and rh-mariadb102-galera security and bug fix update

Fixed packages 46

Vulnerabilities 18

• Medium 6.5
  CVE-2020-2780

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 15, 2020
• Medium 5.9
  CVE-2020-2574

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 15, 2020
• Medium 5.5
  CVE-2020-2760

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 5.3
  CVE-2020-2752

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 4.9
  CVE-2020-2812

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 4.9
  CVE-2020-2814

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Low 3.7
  CVE-2020-2922

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 15, 2020
• Unscored —
  CVE-2019-2614

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 23, 2019
• Unscored —
  CVE-2019-2627

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 23, 2019
• Unscored —
  CVE-2019-2628

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affecte…

  Oracle MySQL Server mysql-5.7 mariadb Ubuntu Alpine
  Apr 23, 2019
• Unscored —
  CVE-2019-2737

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-2739

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-2740

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-2758

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-2805

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-2938

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Oct 16, 2019
• Unscored —
  CVE-2019-2974

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Oct 16, 2019
• Unscored —
  CVE-2020-13249

  libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet rec…

  mariadb-10.3 mariadb-10.1 mariadb-connector-c Ubuntu Alpine
  May 20, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1702969
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1702976
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1702977
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1731997
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1731999
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1732000
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1732008
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1732025
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1764680
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1764691
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1798587
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1830056
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1830059
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1830060
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1830082
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1835849
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1835850
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1839827
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1880319
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1880328
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4174.json
• report
  https://access.redhat.com/security/cve/CVE-2019-2614
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2614
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2614
• article
  http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
• report
  https://access.redhat.com/security/cve/CVE-2019-2627
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2627
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2627
• report
  https://access.redhat.com/security/cve/CVE-2019-2628
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2628
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2628
• report
  https://access.redhat.com/security/cve/CVE-2019-2737
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2737
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2737
• article
  http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
• report
  https://access.redhat.com/security/cve/CVE-2019-2739
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2739
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2739