RHSA-2020:5246HighCVSS 9.0

Red Hat Security Advisory: rh-mariadb103-mariadb and rh-mariadb103-galera security update

Published
November 30, 2020
Last Modified
November 6, 2026

🔗 CVE IDs covered (27)

CVE-2020-2814 →CVE-2020-2922 →CVE-2021-2022 →CVE-2021-2144 →CVE-2020-2780 →CVE-2019-2614 →CVE-2019-2758 →CVE-2020-2752 →CVE-2020-2812 →CVE-2020-13249 →CVE-2020-14765 →CVE-2020-14776 →CVE-2019-2627 →CVE-2020-14789 →CVE-2020-14812 →CVE-2021-2007 →CVE-2021-2194 →CVE-2020-2760 →CVE-2019-2628 →CVE-2019-2737 →CVE-2019-2739 →CVE-2019-2740 →CVE-2019-2805 →CVE-2020-15180 →CVE-2019-2938 →CVE-2019-2974 →CVE-2020-2574 →

📋 Description

CVE-2019-2614 — mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) CVE-2019-2627 — mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) CVE-2019-2628 — mysql: InnoDB unspecified vulnerability (CPU Apr 2019) CVE-2019-2737 — mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) CVE-2019-2739 — mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) CVE-2019-2740 — mysql: Server: XML unspecified vulnerability (CPU Jul 2019) CVE-2019-2758 — mysql: InnoDB unspecified vulnerability (CPU Jul 2019) CVE-2019-2805 — mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) CVE-2019-2938 — mysql: InnoDB unspecified vulnerability (CPU Oct 2019) CVE-2019-2974 — mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) CVE-2020-2574 — mysql: C API unspecified vulnerability (CPU Jan 2020) CVE-2020-2752 — mysql: C API unspecified vulnerability (CPU Apr 2020) CVE-2020-2760 — mysql: InnoDB unspecified vulnerability (CPU Apr 2020) CVE-2020-2780 — mysql: Server: DML unspecified vulnerability (CPU Apr 2020) CVE-2020-2812 — mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) CVE-2020-2814 — mysql: InnoDB unspecified vulnerability (CPU Apr 2020) CVE-2020-2922 — mysql: C API unspecified vulnerability (CPU Apr 2020) CVE-2020-13249 — mariadb-connector-c: Improper validation of content in a OK packet received from server CVE-2020-14765 — mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) CVE-2020-14776 — mysql: InnoDB unspecified vulnerability (CPU Oct 2020) CVE-2020-14789 — mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) CVE-2020-14812 — mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) CVE-2020-15180 — mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep CVE-2021-2007 — mysql: C API unspecified vulnerability (CPU Jan 2021) CVE-2021-2022 — mysql: InnoDB unspecified vulnerability (CPU Jan 2021) CVE-2021-2144 — mysql: Server: Parser unspecified vulnerability (CPU Apr 2021) CVE-2021-2194 — mysql: InnoDB unspecified vulnerability (CPU Apr 2021)

🎯 Affected products200

  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-mariadb103-galera-0:25.3.31-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-mariadb103-galera-0:25.3.31-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-mariadb103-galera-0:25.3.31-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-mariadb103-galera-0:25.3.31-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-mariadb103-galera-0:25.3.31-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
  • rh-mariadb103-galera-debuginfo-0:25.3.31-1.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.

🔗 References (30)