1. Home
  2. Security Advisories
  3. AlmaLinux OS
  4. ALSA-2022:1556

[ALSA-2022:1556] mariadb:10.3 security and bug fix update

Severity Moderate
Affected Packages 45
CVEs 12
Info Packages References Vulnerabilities

An update for the mariadb:10.3 module is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: mariadb (10.3.32), galera (25.3.34). (BZ#2050543)

Security Fix(es):

  • mysql: Server: DML unspecified vulnerability (CPU Apr 2021) (CVE-2021-2154)

  • mysql: Server: DML unspecified vulnerability (CPU Apr 2021) (CVE-2021-2166)

  • mysql: InnoDB unspecified vulnerability (CPU Jul 2021) (CVE-2021-2372)

  • mysql: InnoDB unspecified vulnerability (CPU Jul 2021) (CVE-2021-2389)

  • mysql: InnoDB unspecified vulnerability (CPU Oct 2021) (CVE-2021-35604)

  • mariadb: Integer overflow in sql_lex.cc integer leading to crash (CVE-2021-46667)

  • mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref (CVE-2021-46657)

  • mariadb: save_window_function_values triggers an abort during IN subquery (CVE-2021-46658)

  • mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries (CVE-2021-46662)

  • mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause (CVE-2021-46666)

  • mariadb: No password masking in audit log when using ALTER USER <user> IDENTIFIED BY <password> command (BZ#1981332)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • mariadb:10.3/mariadb: /etc/security/user_map.conf getting overwritten with mariadb-server upgrade (BZ#2050514)

  • MariaDB logrotate leads to "gzip: stdin: file size changed while zipping" (BZ#2050532)

  • Crash: WSREP: invalid state ROLLED_BACK (FATAL) (BZ#2050533)

  • Galera doesn't work without 'procps-ng' package MariaDB-10.3 (BZ#2050550)

Package Affected Version
pkg:rpm/almalinux/mariadb?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-test?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-test?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-test?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-server?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-server?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-server?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-server-utils?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-server-utils?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-server-utils?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-server-galera?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-server-galera?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-server-galera?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-oqgraph-engine?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-oqgraph-engine?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-oqgraph-engine?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-gssapi-server?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-gssapi-server?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-gssapi-server?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-errmsg?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-errmsg?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-errmsg?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-embedded?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-embedded?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-embedded?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-embedded-devel?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-embedded-devel?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-embedded-devel?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-devel?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-devel?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-devel?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-common?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-common?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-common?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-backup?arch=x86_64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/mariadb-backup?arch=x86_64&distro=almalinux-8.5 < 10.3.32-2.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/mariadb-backup?arch=aarch64&distro=almalinux-8.6 < 10.3.32-2.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/Judy?arch=x86_64&distro=almalinux-8.6 < 1.0.5-18.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/Judy?arch=x86_64&distro=almalinux-8.5 < 1.0.5-18.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/Judy?arch=aarch64&distro=almalinux-8.6 < 1.0.5-18.module_el8.6.0+2761+593e5e59
pkg:rpm/almalinux/galera?arch=x86_64&distro=almalinux-8.6 < 25.3.34-4.module_el8.6.0+2867+72759d2f
pkg:rpm/almalinux/galera?arch=x86_64&distro=almalinux-8.5 < 25.3.34-4.module_el8.5.0+2632+14ced695
pkg:rpm/almalinux/galera?arch=aarch64&distro=almalinux-8.6 < 25.3.34-4.module_el8.6.0+2867+72759d2f
ID
ALSA-2022:1556
Severity
moderate
URL
https://errata.almalinux.org/ALSA-2022:1556.html
Published
2022-04-26T13:50:43
(2 years ago)
Modified
2022-04-28T12:47:03
(2 years ago)
Rights
Copyright 2022 AlmaLinux OS
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/almalinux/mariadb?arch=x86_64&distro=almalinux-8.6 almalinux mariadb < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb?arch=x86_64&distro=almalinux-8.5 almalinux mariadb < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb?arch=aarch64&distro=almalinux-8.6 almalinux mariadb < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-test?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-test < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-test?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-test < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-test?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-test < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-server?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-server < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-server?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-server < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-server?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-server < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-server-utils?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-server-utils < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-server-utils?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-server-utils < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-server-utils?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-server-utils < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-server-galera?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-server-galera < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-server-galera?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-server-galera < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-server-galera?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-server-galera < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-oqgraph-engine?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-oqgraph-engine < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-oqgraph-engine?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-oqgraph-engine < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-oqgraph-engine?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-oqgraph-engine < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-gssapi-server?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-gssapi-server < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-gssapi-server?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-gssapi-server < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-gssapi-server?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-gssapi-server < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-errmsg?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-errmsg < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-errmsg?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-errmsg < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-errmsg?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-errmsg < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-embedded?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-embedded < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-embedded?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-embedded < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-embedded?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-embedded < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-embedded-devel?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-embedded-devel < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-embedded-devel?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-embedded-devel < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-embedded-devel?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-embedded-devel < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-devel?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-devel < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-devel?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-devel < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-devel?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-devel < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-common?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-common < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-common?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-common < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-common?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-common < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/mariadb-backup?arch=x86_64&distro=almalinux-8.6 almalinux mariadb-backup < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/mariadb-backup?arch=x86_64&distro=almalinux-8.5 almalinux mariadb-backup < 10.3.32-2.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/mariadb-backup?arch=aarch64&distro=almalinux-8.6 almalinux mariadb-backup < 10.3.32-2.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/Judy?arch=x86_64&distro=almalinux-8.6 almalinux Judy < 1.0.5-18.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/Judy?arch=x86_64&distro=almalinux-8.5 almalinux Judy < 1.0.5-18.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/Judy?arch=aarch64&distro=almalinux-8.6 almalinux Judy < 1.0.5-18.module_el8.6.0+2761+593e5e59 almalinux-8.6 aarch64
Affected pkg:rpm/almalinux/galera?arch=x86_64&distro=almalinux-8.6 almalinux galera < 25.3.34-4.module_el8.6.0+2867+72759d2f almalinux-8.6 x86_64
Affected pkg:rpm/almalinux/galera?arch=x86_64&distro=almalinux-8.5 almalinux galera < 25.3.34-4.module_el8.5.0+2632+14ced695 almalinux-8.5 x86_64
Affected pkg:rpm/almalinux/galera?arch=aarch64&distro=almalinux-8.6 almalinux galera < 25.3.34-4.module_el8.6.0+2867+72759d2f almalinux-8.6 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date