Linux · Ubuntu · Package update · May 27, 2021

mariadb-plugin-gssapi-client 1:10.1.47-0ubuntu0.18.04.1: mariadb-plugin-gssapi-client 1:10.1.47-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

mariadb-plugin-gssapi-client 1:10.1.47-0ubuntu0.18.04.1, released May 27, 2021, fixes 6 CVEs in mariadb-plugin-gssapi-client. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
6
None rated Critical
Exploited
0
None reported
Highest CVSS
9.0
Base score, 0 to 10
Highest EPSS
0.0532
92nd percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 2 Routine 4

Fixed package versions

ProductReleaseFixed in
mariadb-plugin-gssapi-clientUbuntu 18.04.6 LTS (bionic)1:10.1.47-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2020-15180 asio-devel: ELSA-2020-5500: mariadb:10.3 security, bug fix, and enhancement update (IMPORTANT)9.0 0.0532 None reported
High CVE-2020-13249 asio-devel: ELSA-2020-5500: mariadb:10.3 security, bug fix, and enhancement update (IMPORTANT)8.8 0.0230 None reported
Routine CVE-2020-2760 libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)5.5 0.0319 None reported
Routine CVE-2020-2812 libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: Stored Procedure)4.9 0.0318 None reported
Routine CVE-2020-2814 libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB)4.9 0.0297 None reported
Routine CVE-2020-2752 asio-devel: ELSA-2020-5500: mariadb:10.3 security, bug fix, and enhancement update (IMPORTANT)5.3 0.0234 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.