RHSA-2022:4818MediumCVSS 7.5

Red Hat Security Advisory: mariadb:10.3 security and bug fix update

Published
May 31, 2022
Last Modified
November 9, 2026

🔗 CVE IDs covered (14)

CVE-2021-35604 →CVE-2021-46657 →CVE-2021-46667 →CVE-2022-31621 →CVE-2022-31624 →CVE-2021-2154 →CVE-2021-2166 →CVE-2021-2389 →CVE-2021-46658 →CVE-2021-46662 →CVE-2021-46666 →CVE-2022-21451 →CVE-2022-27385 →CVE-2021-2372 →

📋 Description

CVE-2021-2154 — mysql: Server: DML unspecified vulnerability (CPU Apr 2021) CVE-2021-2166 — mysql: Server: DML unspecified vulnerability (CPU Apr 2021) CVE-2021-2372 — mysql: InnoDB unspecified vulnerability (CPU Jul 2021) CVE-2021-2389 — mysql: InnoDB unspecified vulnerability (CPU Jul 2021) CVE-2021-35604 — mysql: InnoDB unspecified vulnerability (CPU Oct 2021) CVE-2021-46657 — mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref CVE-2021-46658 — mariadb: save_window_function_values triggers an abort during IN subquery CVE-2021-46662 — mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries CVE-2021-46666 — mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause CVE-2021-46667 — mariadb: Integer overflow in sql_lex.cc integer leading to crash CVE-2022-21451 — mysql: InnoDB unspecified vulnerability (CPU Apr 2022) CVE-2022-27385 — mariadb: crash in Used_tables_and_const_cache::used_tables_and_const_cache_join CVE-2022-31621 — mariadb: improper locking due to unreleased lock in the ds_xbstream.cc CVE-2022-31624 — mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c

🎯 Affected products116

  • Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.src (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.src (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-debuginfo-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-debuginfo-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-debuginfo-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-debuginfo-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-debugsource-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-debugsource-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-debugsource-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • galera-debugsource-0:25.3.34-4.module+el8.4.0+15058+0c3d11c7.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • mariadb-3:10.3.32-2.module+el8.4.0+15058+0c3d11c7.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • mariadb-3:10.3.32-2.module+el8.4.0+15058+0c3d11c7.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • mariadb-3:10.3.32-2.module+el8.4.0+15058+0c3d11c7.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
  • +86 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically.

🔗 References (21)