Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2022-1557

Опубликовано: 03 мая 2022
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2022-1557: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)

galera [26.4.9-4]

  • Use downstream garbd-wrapper and garbd.service to ensure compatibility
  • Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service in case user want's to use them

[26.4.9-3]

  • Explicitly require the 'procps-ng' package
  • Otherwise it will not require it in the lightweight systems (e.g. containers)
  • and Galera won't work properly

[26.4.9-2]

  • Switch from SCONS build tooling to CMAKE build tooling

[26.4.9-1]

  • Rebase to 26.4.9

mariadb [3:10.5.13-1]

  • Rebase to 10.5.13
  • Add wsrep_sst_rsync_tunnel script

[3:10.5.12-1]

  • Rebase to 10.5.12

[3:10.5.11-1]

  • Rebase to 10.5.11

[3:10.5.10-2]

  • Set user_map.conf file to be noreplace config file
  • Resolves: rhbz#1989621

[3:10.5.10-1]

  • Rebase to 10.5.10

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

Module mariadb:10.5 is enabled

Judy

1.0.5-18.module+el8.4.0+20040+caf70fad

galera

26.4.9-4.module+el8.5.0+20630+d7805586

mariadb

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-backup

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-common

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-devel

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-embedded

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-embedded-devel

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-errmsg

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-gssapi-server

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-oqgraph-engine

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-pam

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-server

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-server-galera

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-server-utils

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-test

10.5.13-1.module+el8.5.0+20630+d7805586

Oracle Linux x86_64

Module mariadb:10.5 is enabled

Judy

1.0.5-18.module+el8.4.0+20040+caf70fad

galera

26.4.9-4.module+el8.5.0+20630+d7805586

mariadb

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-backup

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-common

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-devel

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-embedded

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-embedded-devel

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-errmsg

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-gssapi-server

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-oqgraph-engine

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-pam

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-server

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-server-galera

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-server-utils

10.5.13-1.module+el8.5.0+20630+d7805586

mariadb-test

10.5.13-1.module+el8.5.0+20630+d7805586

Связанные уязвимости

oracle-oval
больше 3 лет назад

ELSA-2022-1556: mariadb:10.3 security and bug fix update (MODERATE)

rocky
больше 3 лет назад

Moderate: mariadb:10.5 security, bug fix, and enhancement update

rocky
больше 3 лет назад

Moderate: mariadb:10.3 security and bug fix update

CVSS3: 5.5
ubuntu
почти 4 года назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

CVSS3: 5.5
redhat
почти 4 года назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).