Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update

Fixed packages 28

Vulnerabilities 29

• High 7.2
  CVE-2021-2144

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• Medium 6.5
  CVE-2020-14765

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Oct 21, 2020
• Medium 6.5
  CVE-2020-2780

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 15, 2020
• Medium 5.9
  CVE-2020-2574

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 15, 2020
• Medium 5.5
  CVE-2020-2760

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 5.3
  CVE-2020-2752

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 4.9
  CVE-2020-14776

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Oct 21, 2020
• Medium 4.9
  CVE-2020-14789

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Oct 21, 2020
• Medium 4.9
  CVE-2020-14812

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are aff…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Oct 21, 2020
• Medium 4.9
  CVE-2020-2812

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 4.9
  CVE-2020-2814

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 4.9
  CVE-2021-2194

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu
  Apr 22, 2021
• Medium 4.4
  CVE-2021-2022

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu
  Jan 20, 2021
• Low 3.7
  CVE-2020-2922

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 15, 2020
• Low 3.7
  CVE-2021-2007

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jan 20, 2021
• Unscored —
  CVE-2019-2510

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affecte…

  Oracle MySQL Server mysql-5.7 mariadb Ubuntu Alpine
  Jan 16, 2019
• Unscored —
  CVE-2019-2537

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 16, 2019
• Unscored —
  CVE-2019-2614

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 23, 2019
• Unscored —
  CVE-2019-2627

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 23, 2019
• Unscored —
  CVE-2019-2628

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affecte…

  Oracle MySQL Server mysql-5.7 mariadb Ubuntu Alpine
  Apr 23, 2019
• Unscored —
  CVE-2019-2737

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-2739

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-2740

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML). Supported versions that are af…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-2758

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-2805

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jul 23, 2019
• Unscored —
  CVE-2019-2938

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Oct 16, 2019
• Unscored —
  CVE-2019-2974

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Oct 16, 2019
• Unscored —
  CVE-2020-13249

  libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet rec…

  mariadb-10.3 mariadb-10.1 mariadb-connector-c Ubuntu Alpine
  May 20, 2020
• Unscored —
  CVE-2020-15180

  A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for c…

  mariadb-10.3 mariadb-10.1 mariadb mariadb-10.5 Debian Ubuntu Alpine
  May 27, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1666751
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1666763
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1702969
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1702976
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1702977
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1731997
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1731999
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1732000
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1732008
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1732025
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1764680
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1764691
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1798587
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1830056
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1830059
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1830060
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1830082
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1835849
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1835850
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1839827
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890738
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890743
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890747
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890756
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1894919
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899012
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899020
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899025
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899085
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899089
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5663.json
• report
  https://access.redhat.com/security/cve/CVE-2019-2510
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2510
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2510
• article
  http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
• report
  https://access.redhat.com/security/cve/CVE-2019-2537
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-2537
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-2537