{"id":22088,"date":"2022-03-23T21:19:30","date_gmt":"2022-03-23T17:19:30","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/166405\/RHSA-2022-1010-01.txt"},"modified":"2022-03-27T09:39:00","modified_gmt":"2022-03-27T05:09:00","slug":"red-hat-security-advisory-2022-1010-01-mariadb103","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/red-hat-security-advisory-2022-1010-01-mariadb103\/","title":{"rendered":"Red Hat Security Advisory 2022-1010-01 mariadb103"},"content":{"rendered":"

—–BEGIN PGP SIGNED MESSAGE—–
\nHash: SHA256<\/p>\n

=====================================================================
\nRed Hat Security Advisory<\/p>\n

Synopsis: Moderate: rh-mariadb103-mariadb security and bug fix update
\nAdvisory ID: RHSA-2022:1010-01
\nProduct: Red Hat Software Collections
\nAdvisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:1010
\nIssue date: 2022-03-22
\nCVE Names: CVE-2021-2154 CVE-2021-2166 CVE-2021-2372
\nCVE-2021-2389 CVE-2021-35604 CVE-2021-46657
\nCVE-2021-46662 CVE-2021-46666 CVE-2021-46667
\n=====================================================================<\/p>\n

1. Summary:<\/p>\n

An update for rh-mariadb103-mariadb and rh-mariadb103-galera is now
\navailable for Red Hat Software Collections.<\/p>\n

Red Hat Product Security has rated this update as having a security impact
\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
\ngives a detailed severity rating, is available for each vulnerability from
\nthe CVE link(s) in the References section.<\/p>\n

2. Relevant releases\/architectures:<\/p>\n

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) – ppc64le, s390x, x86_64
\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) – x86_64<\/p>\n

3. Description:<\/p>\n

MariaDB is a multi-user, multi-threaded SQL database server. For all
\npractical purposes, MariaDB is binary-compatible with MySQL.<\/p>\n

The following packages have been upgraded to a later upstream version:
\nrh-mariadb103-mariadb (10.3.32), rh-mariadb103-galera (25.3.34).
\n(BZ#2050544)<\/p>\n

Security Fix(es):<\/p>\n

* mysql: Server: DML unspecified vulnerability (CPU Apr 2021)
\n(CVE-2021-2154)<\/p>\n

* mysql: Server: DML unspecified vulnerability (CPU Apr 2021)
\n(CVE-2021-2166)<\/p>\n

* mysql: InnoDB unspecified vulnerability (CPU Jul 2021) (CVE-2021-2372)<\/p>\n

* mysql: InnoDB unspecified vulnerability (CPU Jul 2021) (CVE-2021-2389)<\/p>\n

* mysql: InnoDB unspecified vulnerability (CPU Oct 2021) (CVE-2021-35604)<\/p>\n

* mariadb: Integer overflow in sql_lex.cc integer leading to crash
\n(CVE-2021-46667)<\/p>\n

* mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having
\nouter ref (CVE-2021-46657)<\/p>\n

* mariadb: Crash in set_var.cc via certain UPDATE queries with nested
\nsubqueries (CVE-2021-46662)<\/p>\n

* mariadb: Crash caused by mishandling of a pushdown from a HAVING clause
\nto a WHERE clause (CVE-2021-46666)<\/p>\n

* mariadb: No password masking in audit log when using ALTER USER <user>
\nIDENTIFIED BY <password> command (BZ#1981332)<\/p>\n

For more details about the security issue(s), including the impact, a CVSS
\nscore, acknowledgments, and other related information, refer to the CVE
\npage(s) listed in the References section.<\/p>\n

Bug Fix(es):<\/p>\n

* rh-mariadb103: \/etc\/security\/user_map.conf getting overwritten with
\nmariadb-server upgrade (BZ#2050516)<\/p>\n

* mysqld got signal 6, “WSREP: invalid state ROLLED_BACK (FATAL)”
\n(BZ#2050520)<\/p>\n

* MariaDB logrotate leads to “gzip: stdin: file size changed while zipping”
\n(BZ#2050538)<\/p>\n

* Galera doesn’t work without ‘procps-ng’ package [rhscl-3] (BZ#2050549)<\/p>\n

4. Solution:<\/p>\n

For details on how to apply this update, which includes the changes
\ndescribed in this advisory, refer to:<\/p>\n

https:\/\/access.redhat.com\/articles\/11258<\/p>\n

After installing this update, the MariaDB server daemon (mysqld) will be
\nrestarted automatically.<\/p>\n

5. Bugs fixed (https:\/\/bugzilla.redhat.com\/):<\/p>\n

1951752 – CVE-2021-2154 mysql: Server: DML unspecified vulnerability (CPU Apr 2021)
\n1951755 – CVE-2021-2166 mysql: Server: DML unspecified vulnerability (CPU Apr 2021)
\n1981332 – mariadb: No password masking in audit log when using ALTER USER <user> IDENTIFIED BY <password> command
\n1992303 – CVE-2021-2372 mysql: InnoDB unspecified vulnerability (CPU Jul 2021)
\n1992309 – CVE-2021-2389 mysql: InnoDB unspecified vulnerability (CPU Jul 2021)
\n2016101 – CVE-2021-35604 mysql: InnoDB unspecified vulnerability (CPU Oct 2021)
\n2049305 – CVE-2021-46657 mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref
\n2050019 – CVE-2021-46662 mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries
\n2050028 – CVE-2021-46666 mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause
\n2050030 – CVE-2021-46667 mariadb: Integer overflow in sql_lex.cc integer leading to crash
\n2050509 – rh-mariadb103-mariadb: With ALTER USER …IDENTIFIED BY command, password doesn’t get replaced by asterisks in mariadb audit log [rhscl-3] [rhscl-3.8.z]\n2050516 – rh-mariadb103: \/etc\/security\/user_map.conf getting overwritten with mariadb-server upgrade [rhscl-3.8.z]\n2050520 – mysqld got signal 6, “WSREP: invalid state ROLLED_BACK (FATAL)” [rhscl-3.8.z]\n2050538 – MariaDB logrotate leads to “gzip: stdin: file size changed while zipping” [rhscl-3.8.z]\n2050544 – Tracker: Rebase galera package to the newest for MariaDB-10.3 (25.3.34) [rhscl-3.8.z]\n2050549 – Galera doesn’t work without ‘procps-ng’ package [rhscl-3] [rhscl-3.8.z]\n

6. Package List:<\/p>\n

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):<\/p>\n

Source:
\nrh-mariadb103-galera-25.3.34-4.el7.src.rpm
\nrh-mariadb103-mariadb-10.3.32-2.el7.src.rpm<\/p>\n

ppc64le:
\nrh-mariadb103-galera-25.3.34-4.el7.ppc64le.rpm
\nrh-mariadb103-galera-debuginfo-25.3.34-4.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-backup-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-backup-syspaths-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-common-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-config-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-config-syspaths-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-connect-engine-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-debuginfo-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-devel-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-errmsg-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-gssapi-server-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-oqgraph-engine-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-server-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-server-galera-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-server-galera-syspaths-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-server-syspaths-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-server-utils-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-server-utils-syspaths-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-syspaths-10.3.32-2.el7.ppc64le.rpm
\nrh-mariadb103-mariadb-test-10.3.32-2.el7.ppc64le.rpm<\/p>\n

s390x:
\nrh-mariadb103-galera-25.3.34-4.el7.s390x.rpm
\nrh-mariadb103-galera-debuginfo-25.3.34-4.el7.s390x.rpm
\nrh-mariadb103-mariadb-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-backup-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-backup-syspaths-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-common-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-config-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-config-syspaths-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-connect-engine-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-debuginfo-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-devel-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-errmsg-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-gssapi-server-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-oqgraph-engine-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-server-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-server-galera-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-server-galera-syspaths-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-server-syspaths-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-server-utils-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-server-utils-syspaths-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-syspaths-10.3.32-2.el7.s390x.rpm
\nrh-mariadb103-mariadb-test-10.3.32-2.el7.s390x.rpm<\/p>\n

x86_64:
\nrh-mariadb103-galera-25.3.34-4.el7.x86_64.rpm
\nrh-mariadb103-galera-debuginfo-25.3.34-4.el7.x86_64.rpm
\nrh-mariadb103-mariadb-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-backup-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-backup-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-common-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-config-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-config-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-connect-engine-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-debuginfo-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-devel-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-errmsg-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-gssapi-server-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-oqgraph-engine-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-galera-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-galera-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-utils-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-utils-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-test-10.3.32-2.el7.x86_64.rpm<\/p>\n

Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7):<\/p>\n

Source:
\nrh-mariadb103-galera-25.3.34-4.el7.src.rpm
\nrh-mariadb103-mariadb-10.3.32-2.el7.src.rpm<\/p>\n

x86_64:
\nrh-mariadb103-galera-25.3.34-4.el7.x86_64.rpm
\nrh-mariadb103-galera-debuginfo-25.3.34-4.el7.x86_64.rpm
\nrh-mariadb103-mariadb-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-backup-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-backup-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-common-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-config-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-config-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-connect-engine-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-debuginfo-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-devel-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-errmsg-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-gssapi-server-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-oqgraph-engine-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-galera-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-galera-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-utils-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-server-utils-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-syspaths-10.3.32-2.el7.x86_64.rpm
\nrh-mariadb103-mariadb-test-10.3.32-2.el7.x86_64.rpm<\/p>\n

These packages are GPG signed by Red Hat for security. Our key and
\ndetails on how to verify the signature are available from
\nhttps:\/\/access.redhat.com\/security\/team\/key\/<\/p>\n

7. References:<\/p>\n

https:\/\/access.redhat.com\/security\/cve\/CVE-2021-2154
\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2021-2166
\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2021-2372
\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2021-2389
\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2021-35604
\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2021-46657
\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2021-46662
\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2021-46666
\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2021-46667
\nhttps:\/\/access.redhat.com\/security\/updates\/classification\/#moderate<\/p>\n

8. Contact:<\/p>\n

The Red Hat security contact is <secalert@redhat.com>. More contact
\ndetails at https:\/\/access.redhat.com\/security\/team\/contact\/<\/p>\n

Copyright 2022 Red Hat, Inc.
\n—–BEGIN PGP SIGNATURE—–
\nVersion: GnuPG v1<\/p>\n

iQIVAwUBYjnrZdzjgjWX9erEAQi8cA\/\/cECZaHgn+uCXFsmXOnTUVBhN5\/RIDwmF
\nYdjzxXN58fhy8pq2UVDtOHvD82fsabvJBp9cbeqkhn+Om\/oI8u9iQ3v8bZJBpRzZ
\nGx1\/E5iRyvWwUg7CSLqmNnc7eHZ6Kke+cgjHywNW14tvaGUWGdUfcwCojkjhz6Rd
\nkF8KyCqFyw2U+669s6BqLHBLxT6IwmkxjsSfuiSUdINOmvduK6fzuA8b9dQMPeUk
\n7lma0mW\/Hk0A3qS4wrZKAGr8z6bwVssta\/W3qLan+MhI8cEke\/\/SpscZLJyUW1G+
\n\/genKNsHHmZKmvRVoVK5g0KoUhrDPzguud9yjwtASpR1ZzaNHGaJjPFLCvgrMeHI
\nbDqgrxXsAq\/+zVMKSAQJNI41VQoxZpc3RnzlJy5afa4OnkJ85SF+SARkm6k8ViCz
\ngP07tehwL+tbuaC+SZnfRkKehenQsC3wRTvamchcjShbShikHlVmb\/QzJ8b\/iu6t
\n4ErYeNSww7DLyOBXB4R0Y1FNJV4S+kNX5gQthUZ0tMOgA\/R07xHMQ3hZTTj8ZuLM
\nLx9LEOyEkAmyXoVHB\/fX8BHAA6obgJvP0BABKHo5dg5qQc49wGyLhXFb9aiPmlpS
\nkSl\/ijDWwP13+whm5xW6bI7J1+lyX+cnksKAPG4olT7uP6uFgU4ILNqNxOXBjuJx
\nfcjqAzMn5Is=
\n=qQTx
\n—–END PGP SIGNATURE—–
\n—
\nRHSA-announce mailing list
\nRHSA-announce@redhat.com
\nhttps:\/\/listman.redhat.com\/mailman\/listinfo\/rhsa-announce<\/p>\n","protected":false},"excerpt":{"rendered":"

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-mariadb103-mariadb security and bug fix update Advisory ID: RHSA-2022:1010-01 Product: Red Hat Software Collections Advisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:1010 Issue date: 2022-03-22 CVE Names: CVE-2021-2154 CVE-2021-2166 CVE-2021-2372 CVE-2021-2389 CVE-2021-35604 CVE-2021-46657 CVE-2021-46662 CVE-2021-46666 CVE-2021-46667 ===================================================================== 1. Summary: An update for rh-mariadb103-mariadb and rh-mariadb103-galera is now …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-22088","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/22088","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=22088"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/22088\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=22088"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=22088"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=22088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}