# RHSA-2020:5500: Security update for 15 packages RHSA-2020:5500, released December 15, 2020, fixes 17 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/rhsa-2020-5500 - Platform: Linux - Released: Dec 15, 2020 - Priority: High (Closes CVE-2020-15180, high severity) - CVEs: 17, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2020:5500 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Judy](https://patchblox.com/security/data/product/linux/judy.md) | RHEL 8 | 0:1.0.5-18.module+el8+2765+cfa4f87b | | [galera](https://patchblox.com/security/data/product/linux/galera.md) | RHEL 8 | 0:25.3.31-1.module+el8.3.0+8843+3f4e42f6 | | [mariadb](https://patchblox.com/security/data/product/linux/mariadb.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-backup](https://patchblox.com/security/data/product/linux/mariadb-backup.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-common](https://patchblox.com/security/data/product/linux/mariadb-common.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-devel](https://patchblox.com/security/data/product/linux/mariadb-devel.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-embedded](https://patchblox.com/security/data/product/linux/mariadb-embedded.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-embedded-devel](https://patchblox.com/security/data/product/linux/mariadb-embedded-devel.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-errmsg](https://patchblox.com/security/data/product/linux/mariadb-errmsg.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-gssapi-server](https://patchblox.com/security/data/product/linux/mariadb-gssapi-server.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-oqgraph-engine](https://patchblox.com/security/data/product/linux/mariadb-oqgraph-engine.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-server](https://patchblox.com/security/data/product/linux/mariadb-server.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-server-galera](https://patchblox.com/security/data/product/linux/mariadb-server-galera.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-server-utils](https://patchblox.com/security/data/product/linux/mariadb-server-utils.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | | [mariadb-test](https://patchblox.com/security/data/product/linux/mariadb-test.md) | RHEL 8 | 3:10.3.27-3.module+el8.3.0+8972+5e3224e9 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2020-15180](https://patchblox.com/security/data/cve/CVE-2020-15180.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 9.0 | 0.0554 | | | [CVE-2020-13249](https://patchblox.com/security/data/cve/CVE-2020-13249.md) | High | galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL | 8.8 | 0.0240 | | | [CVE-2021-2144](https://patchblox.com/security/data/cve/CVE-2021-2144.md) | High | mecab: MySQL is a multi-user, multi-threaded SQL database server | 7.2 | 0.0189 | | | [CVE-2019-2974](https://patchblox.com/security/data/cve/CVE-2019-2974.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Optimizer) | 6.5 | 0.0376 | | | [CVE-2020-2574](https://patchblox.com/security/data/cve/CVE-2020-2574.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Client product of Oracle MySQL (component: CAPI) | 5.9 | 0.0351 | | | [CVE-2020-14765](https://patchblox.com/security/data/cve/CVE-2020-14765.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: FTS) | 6.5 | 0.0317 | | | [CVE-2020-2760](https://patchblox.com/security/data/cve/CVE-2020-2760.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 5.5 | 0.0301 | | | [CVE-2020-2812](https://patchblox.com/security/data/cve/CVE-2020-2812.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure) | 4.9 | 0.0301 | | | [CVE-2019-2938](https://patchblox.com/security/data/cve/CVE-2019-2938.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 4.4 | 0.0299 | | | [CVE-2020-14812](https://patchblox.com/security/data/cve/CVE-2020-14812.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Locking) | 4.9 | 0.0292 | | | [CVE-2020-2814](https://patchblox.com/security/data/cve/CVE-2020-2814.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 4.9 | 0.0281 | | | [CVE-2020-14776](https://patchblox.com/security/data/cve/CVE-2020-14776.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 4.9 | 0.0265 | | | [CVE-2020-14789](https://patchblox.com/security/data/cve/CVE-2020-14789.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: FTS) | 4.9 | 0.0265 | | | [CVE-2020-2780](https://patchblox.com/security/data/cve/CVE-2020-2780.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: DML) | 6.5 | 0.0245 | | | [CVE-2020-2752](https://patchblox.com/security/data/cve/CVE-2020-2752.md) | Routine | mecab: MySQL is a multi-user, multi-threaded SQL database server | 5.3 | 0.0234 | | | [CVE-2021-2194](https://patchblox.com/security/data/cve/CVE-2021-2194.md) | Routine | libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 4.9 | 0.0231 | | | [CVE-2021-2022](https://patchblox.com/security/data/cve/CVE-2021-2022.md) | Routine | mysql-router: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) | 4.4 | 0.0192 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo