Skip to content
OpenAdvisories
Medium RLSA-2019:3708 12 CVEs

Moderate: mariadb:10.3 security and bug fix update

Published Nov 5, 2019 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: mariadb (10.3.17), galera (25.3.26). (BZ#1701687, BZ#1711265, BZ#1741358)

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Jan 2019) (CVE-2019-2510)

* mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) (CVE-2019-2537)

* mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628)

* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737)

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739)

* mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740)

* mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758)

* mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.

Fixed packages 3

ReleasePackageFixed in
Rocky Linux · 8 asio 0:1.10.8-7.module+el8.5.0+777+18007c86
Rocky Linux · 8 asio 0:1.10.8-7.module+el8.3.0+126+a7f7b5c5
Rocky Linux · 8 Judy 0:1.0.5-18.module+el8.4.0+427+adf35707

Vulnerabilities 12

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1657220
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1659920
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1666751
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1666763
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1686818
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1687879
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1693245
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1702707
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1702709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1702969
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1702976
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1702977
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1731997
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1731999
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732000
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732008
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732025