A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade galeraUpgrade asio-develUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-backupUpgrade Judy-develUpgrade JudyUpgrade mariadb-errmsg | May 4, 2022 | Mar 19, 2021 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Mar 19, 2021 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-sphinx-engineUpgrade mariadb-testUpgrade mariadb-connect-engineUpgrade mariadb-s3-engineUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-cracklib-password-checkUpgrade mariadb-rocksdb-engineUpgrade mariadb-pamUpgrade mariadb-libsUpgrade mariadb-configUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-embedded-devel | Sep 28, 2023 | Mar 19, 2021 |
| Centos_linux | — | Upgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-serverUpgrade galera-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadbUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfo | Apr 20, 2021 | Mar 19, 2021 |
| Debian | — | Upgrade mariadb-10.5 | Mar 24, 2021 | Mar 19, 2021 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 28, 2021 | Mar 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Apr 26, 2022 | Mar 19, 2021 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Mar 19, 2021 |
| Oracle_linux | — | Upgrade mariadb-testUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-serverUpgrade mariadb-commonUpgrade Judy-develUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade asio-develUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-gssapi-server | Apr 27, 2021 | Mar 19, 2021 |
| Redhat_linux | — | Upgrade JudyUpgrade asio-develUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utilsUpgrade galera-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-test-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embedded-develUpgrade Judy-develUpgrade galeraUpgrade mariadb-commonUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade mariadb-debuginfoUpgrade mariadb-embedded-debuginfo | Apr 20, 2021 | Mar 19, 2021 |
| Rocky_linux | — | Upgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade galera-debuginfoUpgrade galera-debugsourceUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadbUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embedded-debuginfoUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-debugsourceUpgrade JudyUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade asio-develUpgrade Judy-devel | Mar 12, 2024 | Mar 19, 2021 |
| Suse | — | Upgrade libmariadbd19Upgrade mariadb-testUpgrade mariadb-toolsUpgrade mariadbUpgrade mariadb-errormessagesUpgrade mariadb-clientUpgrade mariadb-galeraUpgrade libmariadbd-develUpgrade mariadb-rpm-macrosUpgrade libmysqld-develUpgrade mariadb-benchUpgrade libmysqld19 | Aug 5, 2021 | Mar 19, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub