Red Hat Security Advisory: mariadb-connector-c security, bug fix, and enhancement update

Fixed packages 6

Vulnerabilities 5

• Medium 5.9
  CVE-2020-2574

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 15, 2020
• Medium 5.3
  CVE-2020-2752

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Low 3.7
  CVE-2020-2922

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 15, 2020
• Low 3.7
  CVE-2021-2007

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 20, 2021
• Unscored —
  CVE-2020-13249

  libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet rec…

  mariadb-10.3 mariadb-10.1 mariadb-connector-c Ubuntu Alpine
  May 20, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1798587
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1835849
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1835850
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1839827
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1898994
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899002
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899100
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5655.json
• report
  https://access.redhat.com/security/cve/CVE-2020-2574
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2574
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2574
• article
  https://www.oracle.com/security-alerts/cpujan2020.html
• report
  https://access.redhat.com/security/cve/CVE-2020-2752
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2752
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2752
• article
  https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixMSQL
• report
  https://access.redhat.com/security/cve/CVE-2020-2922
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2922
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2922
• report
  https://access.redhat.com/security/cve/CVE-2020-13249
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-13249
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-13249
• report
  https://access.redhat.com/security/cve/CVE-2021-2007
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1922382
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-2007
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-2007
• article
  https://www.oracle.com/security-alerts/cpujan2021.html#AppendixMSQL