Red Hat Security Advisory

RHSA-2019:3708

mariadb:10.3 security and bug fix update

Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) Judy-1.0.5-18.module+el8+2765+cfa4f87b.i686::mariadb-devel:10.3, Judy-devel-1.0.5-18.module+el8+2765+cfa4f87b.aarch64::mariadb-devel:10.3, Judy-devel-1.0.5-18.module+el8+2765+cfa4f87b.i686::mariadb-devel:10.3 +23
Red Hat Enterprise Linux AppStream (v. 8) Judy-1.0.5-18.module+el8+2765+cfa4f87b.aarch64::mariadb:10.3, Judy-1.0.5-18.module+el8+2765+cfa4f87b.ppc64le::mariadb:10.3, Judy-1.0.5-18.module+el8+2765+cfa4f87b.s390x::mariadb:10.3 +47

Fixes 12 records

TI-2019-02281 CVE-2019-2740 · GHSA-568g-c3m2-wvj8

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML).

LOW 36

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04005 Published 2019-07-23 Partial fix

TI-2019-02346 CVE-2019-2805 · GHSA-mg8g-w6cx-6qq2

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 35

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03699 Published 2019-07-23 Partial fix

TI-2019-02299 CVE-2019-2758 · GHSA-3f7w-jxww-c39p

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.03061 Published 2019-07-23 Partial fix

TI-2019-02092 CVE-2019-2537 · GHSA-cxvc-c563-9w9g

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

LOW 30

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.04266 Published 2019-01-16 Partial fix

TI-2019-02278 CVE-2019-2737 · GHSA-pfwc-xjhv-c45m

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03951 Published 2019-07-23 Partial fix

TI-2019-02067 CVE-2019-2510 · GHSA-g2qv-pxr5-f3q6

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 29

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03443 Published 2019-01-16 Partial fix

TI-2019-02178 CVE-2019-2628 · GHSA-gcp9-442f-6h5p

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02799 Published 2019-04-23 Partial fix

TI-2019-02177 CVE-2019-2627 · GHSA-p87x-pph3-ghm8

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 28

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0298 Published 2019-04-23 Partial fix

TI-2019-02164 CVE-2019-2614 · GHSA-86qm-m5x9-pxr7

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 26

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.02782 Published 2019-04-23 Partial fix

TI-2019-02280 CVE-2019-2739 · GHSA-f472-q7mx-rx6p

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server…

LOW 25

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).

CVSS 3.1MEDIUM 5.1 Local High privileges No interaction EPSS 0.00796 Published 2019-07-23 Partial fix

TI-2021-01693 CVE-2021-2007 · GHSA-62m3-j4w3-p5mw

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

LOW 22

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02308 Published 2021-01-20 Partial fix

TI-2020-02617 CVE-2020-2922 · GHSA-95hr-j7p7-26x4

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

LOW 22

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02518 Published 2020-04-15 Partial fix