Summary
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.
The following packages have been upgraded to a later upstream version: mariadb (10.3.28), galera (25.3.32).
Security Fix(es):
* mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user (CVE-2021-27928)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | asio | 0:1.10.8-7.module+el8.5.0+777+18007c86 |
| Rocky Linux · 8 | asio | 0:1.10.8-7.module+el8.3.0+126+a7f7b5c5 |
| Rocky Linux · 8 | galera | 0:25.3.32-1.module+el8.4.0+427+adf35707 |
| Rocky Linux · 8 | Judy | 0:1.0.5-18.module+el8.4.0+427+adf35707 |
| Rocky Linux · 8 | mariadb | 3:10.3.28-1.module+el8.4.0+427+adf35707 |
Vulnerabilities 1
-
Unscored —
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, …
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1940909