RHSA-2020:5654HighCVSS 9.0

Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update

Published
December 22, 2020
Last Modified
November 6, 2026

🔗 CVE IDs covered (17)

CVE-2020-14812 →CVE-2020-15180 →CVE-2020-2752 →CVE-2020-2760 →CVE-2020-2780 →CVE-2020-14776 →CVE-2021-2144 →CVE-2021-2194 →CVE-2021-2022 →CVE-2019-2974 →CVE-2020-2812 →CVE-2020-13249 →CVE-2020-14789 →CVE-2019-2938 →CVE-2020-2574 →CVE-2020-2814 →CVE-2020-14765 →

📋 Description

CVE-2019-2938 — mysql: InnoDB unspecified vulnerability (CPU Oct 2019) CVE-2019-2974 — mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) CVE-2020-2574 — mysql: C API unspecified vulnerability (CPU Jan 2020) CVE-2020-2752 — mysql: C API unspecified vulnerability (CPU Apr 2020) CVE-2020-2760 — mysql: InnoDB unspecified vulnerability (CPU Apr 2020) CVE-2020-2780 — mysql: Server: DML unspecified vulnerability (CPU Apr 2020) CVE-2020-2812 — mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) CVE-2020-2814 — mysql: InnoDB unspecified vulnerability (CPU Apr 2020) CVE-2020-13249 — mariadb-connector-c: Improper validation of content in a OK packet received from server CVE-2020-14765 — mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) CVE-2020-14776 — mysql: InnoDB unspecified vulnerability (CPU Oct 2020) CVE-2020-14789 — mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) CVE-2020-14812 — mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) CVE-2020-15180 — mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep CVE-2021-2022 — mysql: InnoDB unspecified vulnerability (CPU Jan 2021) CVE-2021-2144 — mysql: Server: Parser unspecified vulnerability (CPU Apr 2021) CVE-2021-2194 — mysql: InnoDB unspecified vulnerability (CPU Apr 2021)

🎯 Affected products116

  • Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.src (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.src (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-debuginfo-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-debuginfo-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-debuginfo-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-debuginfo-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-debugsource-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-debugsource-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-debugsource-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • galera-debugsource-0:25.3.31-1.module+el8.2.0+8857+d5b3039b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • mariadb-3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • mariadb-3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • mariadb-3:10.3.27-3.module+el8.2.0+9158+b3fb2ef4.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
  • +86 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.

🔗 References (22)