Headline

RHSA-2019:3708: Red Hat Security Advisory: mariadb:10.3 security and bug fix update

An update for the mariadb:10.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3.17), galera (25.3.26). (BZ#1701687, BZ#1711265, BZ#1741358) Security Fix(es):

mysql: InnoDB unspecified vulnerability (CPU Jan 2019) (CVE-2019-2510)
mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) (CVE-2019-2537)
mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)
mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)
mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628)
mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737)
mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739)
mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740)
mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758)
mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section. Related CVEs:
CVE-2019-2510: mysql: InnoDB unspecified vulnerability (CPU Jan 2019)
CVE-2019-2537: mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)
CVE-2019-2614: mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)
CVE-2019-2627: mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
CVE-2019-2628: mysql: InnoDB unspecified vulnerability (CPU Apr 2019)
CVE-2019-2737: mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)
CVE-2019-2739: mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)
CVE-2019-2740: mysql: Server: XML unspecified vulnerability (CPU Jul 2019)
CVE-2019-2758: mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
CVE-2019-2805: mysql: Server: Parser unspecified vulnerability (CPU Jul 2019)
CVE-2020-2922: mysql: C API unspecified vulnerability (CPU Apr 2020)
CVE-2021-2007: mysql: C API unspecified vulnerability (CPU Jan 2021)