A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade JudyUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade Judy-develUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade asio-devel | May 4, 2022 | Mar 19, 2021 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Mar 19, 2021 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-libsUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-configUpgrade mariadb-rocksdb-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-sphinx-engineUpgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-connect-engineUpgrade mariadb-server-utilsUpgrade mariadb-errmsg | Sep 28, 2023 | Mar 19, 2021 |
| Centos_linux | — | Upgrade mariadb-serverUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade Judy-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-develUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-server | Apr 20, 2021 | Mar 19, 2021 |
| Debian | — | Upgrade mariadb-10.5 | Mar 24, 2021 | Mar 19, 2021 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 28, 2021 | Mar 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Apr 26, 2022 | Mar 19, 2021 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Mar 19, 2021 |
| Oracle_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade galeraUpgrade mariadb-testUpgrade JudyUpgrade Judy-develUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade asio-develUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-server-galera | Apr 27, 2021 | Mar 19, 2021 |
| Redhat_linux | — | Upgrade galeraUpgrade Judy-develUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-commonUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-test-debuginfoUpgrade galera-debugsourceUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-develUpgrade JudyUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade asio-develUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfo | Apr 20, 2021 | Mar 19, 2021 |
| Rocky_linux | — | Upgrade mariadb-test-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade Judy-develUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadbUpgrade asio-develUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade Judy-debugsourceUpgrade mariadb-server-utils | Mar 12, 2024 | Mar 19, 2021 |
| Suse | — | Upgrade mariadb-rpm-macrosUpgrade mariadb-clientUpgrade mariadb-galeraUpgrade libmysqld19Upgrade libmariadbd-develUpgrade mariadb-benchUpgrade libmysqld-develUpgrade mariadb-testUpgrade mariadb-toolsUpgrade libmariadbd19Upgrade mariadbUpgrade mariadb-errormessages | Aug 5, 2021 | Mar 19, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 19, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub