[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2020:5246-01 -- Redhat rh-mariadb103-galera, rh-mariadb103-mariadb

ID: oval:org.secpod.oval:def:505207Date: (C)2020-12-01   (M)2022-12-12
Class: PATCHFamily: unix




MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The following packages have been upgraded to a later upstream version: rh-mariadb103-mariadb , rh-mariadb103-galera . Security Fix: * mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep * mysql: Server: Replication unspecified vulnerability * mysql: Server: Security: Privileges unspecified vulnerability * mysql: InnoDB unspecified vulnerability * mysql: Server: Pluggable Auth unspecified vulnerability * mysql: Server: Security: Privileges unspecified vulnerability * mysql: Server: XML unspecified vulnerability * mysql: InnoDB unspecified vulnerability * mysql: Server: Parser unspecified vulnerability * mysql: InnoDB unspecified vulnerability * mysql: Server: Optimizer unspecified vulnerability * mysql: C API unspecified vulnerability * mysql: InnoDB unspecified vulnerability * mysql: Server: DML unspecified vulnerability * mysql: Server: Stored Procedure unspecified vulnerability * mysql: InnoDB unspecified vulnerability * mysql: C API unspecified vulnerability * mariadb-connector-c: Improper validation of content in a OK packet received from server * mysql: Server: FTS unspecified vulnerability * mysql: InnoDB unspecified vulnerability * mysql: Server: FTS unspecified vulnerability * mysql: Server: Locking unspecified vulnerability * mysql: C API unspecified vulnerability For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Bug Fix: * mysqld_safe --dry-run doesn"t work as expected Enhancement: * [RFE] create separate package providing ha_connect.so plugin for mariadb-server in SCL

Platform:
Red Hat Enterprise Linux 7
Product:
rh-mariadb103-galera
rh-mariadb103-mariadb
Reference:
RHSA-2020:5246-01
CVE-2019-2614
CVE-2019-2627
CVE-2019-2628
CVE-2019-2737
CVE-2019-2739
CVE-2019-2740
CVE-2019-2758
CVE-2019-2805
CVE-2019-2938
CVE-2019-2974
CVE-2020-2574
CVE-2020-2752
CVE-2020-2760
CVE-2020-2780
CVE-2020-2812
CVE-2020-2814
CVE-2020-2922
CVE-2020-13249
CVE-2020-14765
CVE-2020-14776
CVE-2020-14789
CVE-2020-14812
CVE-2020-15180
CVE-2021-2022
CVE-2021-2007
CVE    25
CVE-2021-2007
CVE-2020-13249
CVE-2020-15180
CVE-2020-2574
...

© SecPod Technologies