Red Hat Security Advisory

RHSA-2019:2327

mariadb security and bug fix update

Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) mariadb-1:5.5.64-1.el7, mariadb-libs-1:5.5.64-1.el7, mariadb-server-1:5.5.64-1.el7
Red Hat Enterprise Linux Client Optional (v. 7) mariadb-bench-1:5.5.64-1.el7, mariadb-devel-1:5.5.64-1.el7, mariadb-embedded-1:5.5.64-1.el7 +2
Red Hat Enterprise Linux ComputeNode (v. 7) mariadb-1:5.5.64-1.el7, mariadb-libs-1:5.5.64-1.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) mariadb-bench-1:5.5.64-1.el7, mariadb-devel-1:5.5.64-1.el7, mariadb-embedded-1:5.5.64-1.el7 +3
Red Hat Enterprise Linux Server (v. 7) mariadb-1:5.5.64-1.el7, mariadb-bench-1:5.5.64-1.el7, mariadb-devel-1:5.5.64-1.el7 +5
Red Hat Enterprise Linux Server Optional (v. 7) mariadb-embedded-1:5.5.64-1.el7, mariadb-embedded-1:5.5.64-1.el7.ppc, mariadb-embedded-devel-1:5.5.64-1.el7 +1
Red Hat Enterprise Linux Workstation (v. 7) mariadb-1:5.5.64-1.el7, mariadb-bench-1:5.5.64-1.el7, mariadb-devel-1:5.5.64-1.el7 +3
Red Hat Enterprise Linux Workstation Optional (v. 7) mariadb-embedded-1:5.5.64-1.el7, mariadb-embedded-devel-1:5.5.64-1.el7

Fixes 11 records

TI-2019-02084 CVE-2019-2529 · GHSA-mj64-phg5-fhm9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04486 Published 2019-01-16 Partial fix

TI-2019-02060 CVE-2019-2503 · GHSA-px7j-2qhq-c538

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 33

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling).

CVSS 3.1MEDIUM 6.4 Adjacent network Low privileges No interaction EPSS 0.02507 Published 2019-01-16 Partial fix

TI-2021-01697 CVE-2021-2011 · GHSA-xvch-fv6q-gx5m

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

LOW 32

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0309 Published 2021-01-20 Partial fix

TI-2018-02568 CVE-2018-3282 · GHSA-hv5g-3886-rpxc

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.04 Published 2018-10-17 Partial fix

TI-2020-11399 CVE-2020-14550 · GHSA-mg2j-853w-r6h2

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

LOW 28

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02239 Published 2020-07-15 Partial fix

TI-2019-02177 CVE-2019-2627 · GHSA-p87x-pph3-ghm8

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0298 Published 2019-04-23 Partial fix

TI-2018-02383 CVE-2018-3081 · GHSA-vhpw-hq94-hjjr

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client…

LOW 28

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs).

CVSS 3.1MEDIUM 5.0 Network High privileges No interaction EPSS 0.02687 Published 2018-07-18 Partial fix

TI-2018-02365 CVE-2018-3063 · GHSA-g8gr-2h7q-7749

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03198 Published 2018-07-18 Partial fix

TI-2019-02164 CVE-2019-2614 · GHSA-86qm-m5x9-pxr7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 26

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.02782 Published 2019-04-23 Partial fix

TI-2018-02360 CVE-2018-3058 · GHSA-qg26-735q-4c75

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM).

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02451 Published 2018-07-18 Partial fix

TI-2018-02368 CVE-2018-3066 · GHSA-hg5j-c849-7q67

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 20

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options).

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.01949 Published 2018-07-18 Partial fix