[ELSA-2020-1100] mariadb security and bug fix update
Severity
Moderate
Affected Packages
8
CVEs
4
[1:5.5.65-1]
- Rebase to 5.5.65
Also fixes:
CVE-2019-2737 CVE-2019-2739 CVE-2019-2740 CVE-2019-2805
Resolves: #1741357
- Revert upstream changes that make the mysql_install_db relocatable
because it broke mysql_install_db when run without --rpm arg
Resolves: #1731062
- Add openssl BR that was missing for the tests
| Package | Affected Version |
|---|---|
 pkg:rpm/oraclelinux/mariadb?distro=oraclelinux-7
|
< 5.5.65-1.el7 |
|
pkg:rpm/oraclelinux/mariadb-test?distro=oraclelinux-7
|
< 5.5.65-1.el7 |
|
pkg:rpm/oraclelinux/mariadb-server?distro=oraclelinux-7
|
< 5.5.65-1.el7 |
|
pkg:rpm/oraclelinux/mariadb-libs?distro=oraclelinux-7
|
< 5.5.65-1.el7 |
|
pkg:rpm/oraclelinux/mariadb-embedded?distro=oraclelinux-7
|
< 5.5.65-1.el7 |
|
pkg:rpm/oraclelinux/mariadb-embedded-devel?distro=oraclelinux-7
|
< 5.5.65-1.el7 |
|
pkg:rpm/oraclelinux/mariadb-devel?distro=oraclelinux-7
|
< 5.5.65-1.el7 |
|
pkg:rpm/oraclelinux/mariadb-bench?distro=oraclelinux-7
|
< 5.5.65-1.el7 |
- ID
- ELSA-2020-1100
- Severity
- moderate
- URL
- https://linux.oracle.com/errata/ELSA-2020-1100.html
- Published
-
2020-04-06T00:00:00
(4 years ago) - Modified
-
2020-04-06T00:00:00
(4 years ago) - Rights
- Copyright 2020 Oracle, Inc.
- Other Advisories
-
-
ALAS-2019-1296
-
ALAS-2019-1297
-
ALAS2-2020-1537
-
ALPINE:CVE-2019-2737
-
ALPINE:CVE-2019-2739
-
ALPINE:CVE-2019-2740
-
ALPINE:CVE-2019-2805
-
ALSA-2019:2511
-
ALSA-2019:3708
-
ELSA-2019-2511
-
FEDORA-2019-96516ce0ac
-
FEDORA-2019-c106e46a95
-
FREEBSD:198E6220-AC8B-11E9-A1C7-B499BAEBFEAF
-
openSUSE-SU-2019:2698-1
-
RHSA-2019:2511
-
RHSA-2019:3708
-
RHSA-2020:1100
-
RLSA-2019:2511
-
RLSA-2019:3708
-
SSA:2019-213-01
-
SUSE-SU-2019:2461-1
-
SUSE-SU-2019:2687-1
-
SUSE-SU-2019:3306-1
-
SUSE-SU-2019:3369-1
-
SUSE-SU-2020:0640-1
-
SUSE-SU-2020:0831-1
-
USN-4070-1
-
USN-4070-2
-
USN-4070-3
-
| Source | # ID | Name | URL |
|---|---|---|---|
| elsa | ELSA-2020-1100 |
|
|
| CVE | CVE-2019-2737 |
|
|
| CVE | CVE-2019-2739 |
|
|
| CVE | CVE-2019-2740 |
|
|
| CVE | CVE-2019-2805 |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/oraclelinux/mariadb?distro=oraclelinux-7 | oraclelinux |
mariadb
|
< 5.5.65-1.el7 | oraclelinux-7 | ||
| Affected | pkg:rpm/oraclelinux/mariadb-test?distro=oraclelinux-7 | oraclelinux |
mariadb-test
|
< 5.5.65-1.el7 | oraclelinux-7 | ||
| Affected | pkg:rpm/oraclelinux/mariadb-server?distro=oraclelinux-7 | oraclelinux |
mariadb-server
|
< 5.5.65-1.el7 | oraclelinux-7 | ||
| Affected | pkg:rpm/oraclelinux/mariadb-libs?distro=oraclelinux-7 | oraclelinux |
mariadb-libs
|
< 5.5.65-1.el7 | oraclelinux-7 | ||
| Affected | pkg:rpm/oraclelinux/mariadb-embedded?distro=oraclelinux-7 | oraclelinux |
mariadb-embedded
|
< 5.5.65-1.el7 | oraclelinux-7 | ||
| Affected | pkg:rpm/oraclelinux/mariadb-embedded-devel?distro=oraclelinux-7 | oraclelinux |
mariadb-embedded-devel
|
< 5.5.65-1.el7 | oraclelinux-7 | ||
| Affected | pkg:rpm/oraclelinux/mariadb-devel?distro=oraclelinux-7 | oraclelinux |
mariadb-devel
|
< 5.5.65-1.el7 | oraclelinux-7 | ||
| Affected | pkg:rpm/oraclelinux/mariadb-bench?distro=oraclelinux-7 | oraclelinux |
mariadb-bench
|
< 5.5.65-1.el7 | oraclelinux-7 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |