RHSA-2020:5663HighCVSS 9.0

Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update

Published
December 22, 2020
Last Modified
November 6, 2026

🔗 CVE IDs covered (29)

CVE-2020-14765 →CVE-2021-2022 →CVE-2019-2628 →CVE-2021-2194 →CVE-2019-2938 →CVE-2020-2574 →CVE-2020-2780 →CVE-2020-2922 →CVE-2020-15180 →CVE-2021-2007 →CVE-2019-2740 →CVE-2020-2812 →CVE-2020-14812 →CVE-2019-2627 →CVE-2020-14789 →CVE-2021-2144 →CVE-2019-2758 →CVE-2020-2752 →CVE-2020-13249 →CVE-2020-14776 →CVE-2019-2510 →CVE-2019-2537 →CVE-2019-2737 →CVE-2019-2805 →CVE-2019-2974 →CVE-2019-2614 →CVE-2019-2739 →CVE-2020-2760 →CVE-2020-2814 →

📋 Description

CVE-2019-2510 — mysql: InnoDB unspecified vulnerability (CPU Jan 2019) CVE-2019-2537 — mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) CVE-2019-2614 — mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) CVE-2019-2627 — mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) CVE-2019-2628 — mysql: InnoDB unspecified vulnerability (CPU Apr 2019) CVE-2019-2737 — mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) CVE-2019-2739 — mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) CVE-2019-2740 — mysql: Server: XML unspecified vulnerability (CPU Jul 2019) CVE-2019-2758 — mysql: InnoDB unspecified vulnerability (CPU Jul 2019) CVE-2019-2805 — mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) CVE-2019-2938 — mysql: InnoDB unspecified vulnerability (CPU Oct 2019) CVE-2019-2974 — mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) CVE-2020-2574 — mysql: C API unspecified vulnerability (CPU Jan 2020) CVE-2020-2752 — mysql: C API unspecified vulnerability (CPU Apr 2020) CVE-2020-2760 — mysql: InnoDB unspecified vulnerability (CPU Apr 2020) CVE-2020-2780 — mysql: Server: DML unspecified vulnerability (CPU Apr 2020) CVE-2020-2812 — mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) CVE-2020-2814 — mysql: InnoDB unspecified vulnerability (CPU Apr 2020) CVE-2020-2922 — mysql: C API unspecified vulnerability (CPU Apr 2020) CVE-2020-13249 — mariadb-connector-c: Improper validation of content in a OK packet received from server CVE-2020-14765 — mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) CVE-2020-14776 — mysql: InnoDB unspecified vulnerability (CPU Oct 2020) CVE-2020-14789 — mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) CVE-2020-14812 — mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) CVE-2020-15180 — mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep CVE-2021-2007 — mysql: C API unspecified vulnerability (CPU Jan 2021) CVE-2021-2022 — mysql: InnoDB unspecified vulnerability (CPU Jan 2021) CVE-2021-2144 — mysql: Server: Parser unspecified vulnerability (CPU Apr 2021) CVE-2021-2194 — mysql: InnoDB unspecified vulnerability (CPU Apr 2021)

🎯 Affected products60

  • Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.src (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • galera-0:25.3.31-1.module+el8.0.0+9239+73817dd5.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • galera-0:25.3.31-1.module+el8.0.0+9239+73817dd5.src (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • galera-0:25.3.31-1.module+el8.0.0+9239+73817dd5.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • galera-debuginfo-0:25.3.31-1.module+el8.0.0+9239+73817dd5.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • galera-debuginfo-0:25.3.31-1.module+el8.0.0+9239+73817dd5.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • galera-debugsource-0:25.3.31-1.module+el8.0.0+9239+73817dd5.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • galera-debugsource-0:25.3.31-1.module+el8.0.0+9239+73817dd5.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.src (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-backup-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-backup-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-backup-debuginfo-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-backup-debuginfo-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-common-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-common-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-debuginfo-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-debuginfo-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-debugsource-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-debugsource-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-devel-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • mariadb-devel-3:10.3.27-3.module+el8.0.0+9160+9822c5c7.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
  • +30 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.

🔗 References (33)