MariaDB and MySQL package holding or locking

oli.sennhauser@fromdual.com (Oli Sennhauser) — Fri, 07 Aug 2020 16:02:24 +0000

Repositories from your favourite Linux distribution and from your favourite database software vendor get regular package updates. If you do periodic system upgrades (for example every 2 weeks as we do) you get the newest packages of a release series.
Unfortunately recently the software vendors started not only to fix bugs in new releases but also to introduce new features. And when you fix bugs or introduce new stuff new bugs might appear.
To avoid being hit unexpectedly by new bugs you do not want to upgrade untested software. To achieve this you want to keep/not upgrade some important packages. For example the MariaDB or MySQL server package.
This package pinning is called package version lock on CentOS and Redhat and package holding on Debian and Ubuntu.

MySQL and MariaDB Security

oli.sennhauser@fromdual.com (Oli Sennhauser) — Fri, 18 Jan 2013 09:27:09 +0000

Overview

MySQL Security Products

Database Firewall: GreenSQL
MySQL Database Security: McAfee

Useful Security Links

STIG Update: DISA releases the MariaDB Enterprise 10.x Security Technical Implementation Guide
OWASP: Database Security Cheat Sheet
CIS MySQL 4.1/5.0/5.1 Benchmark (v1.0.2)
CIS Oracle MySQL Community Server 5.6 Benchmark (v1.1.0)
CIS Oracle MySQL Community Server 5.7 Benchmark (v1.0.0)
CIS Oracle MySQL Enterprise Edition 5.6 Benchmark (v1.1.0)
CIS Oracle MySQL Enterprise Edition 5.7 Benchmark (v1.0.0)
MySQL Documentation: Security
BSI certified database servers
CVE Details
RHSA-2013:0121-1
RHSA-2012:1462-1
full-disclosure@lists.grok.org.uk
MySQL Security Forum
MySQL SQL Injection Cheat Sheet

Security Vulnerabilities Fixed in MariaDB

Oracle Critical Patch Update (CPU) Advisory for MySQL

Oracle Critical Patch Update Advisory - Overview
Oracle Critical Patch Update Advisory - October 2024 (45 fixes / 9.1 max score), verbose text form
Oracle Critical Patch Update Advisory - July 2024 (37 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - April 2024 (36 fixes / 7.5 max score), verbose text form
Oracle Critical Patch Update Advisory - January 2024 (40 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - October 2023 (37 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - July 2023 (24 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - April 2023 (34 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - January 2023 (37 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - October 2022 (37 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - July 2022 (34 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - April 2022 (43 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - January 2022 (78 fixes / 7.5 max score), verbose text form
Oracle Critical Patch Update Advisory - October 2021 (66 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - July 2021 (41 fixes / 8.8 max score), verbose text form
Oracle Critical Patch Update Advisory - April 2021 (49 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - January 2021 (43 fixes / 7.5 max score), verbose text form
Oracle Critical Patch Update Advisory - October 2020 (53 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - July 2020 (40 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - April 2020 (45 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - January 2020 (19 fixes / 7.5 max score), verbose text form
Oracle Critical Patch Update Advisory - October 2019 (34 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - July 2019 (45 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - April 2019 (45 fixes / 7.5 max score), verbose text form
Oracle Critical Patch Update Advisory - January 2019 (30 fixes / 9.1 max score), verbose text form
Oracle Critical Patch Update Advisory - October 2018 (38 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - July 2018 (31 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - April 2018 (33 fixes / 7.7 max score), verbose text form
Oracle Critical Patch Update Advisory - January 2018 (25 fixes / 8.1 max score), verbose text form
Oracle Critical Patch Update Advisory - October 2017 (25 fixes / 8.8 max score), verbose text form
Oracle Critical Patch Update Advisory - July 2017 (30 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - April 2017 (39 fixes / 10.0 max score), verbose text form
Oracle Critical Patch Update Advisory - January 2017 (27 fixes / 8.8 max score), verbose text form
Oracle Critical Patch Update Advisory - October 2016 (31 fixes / 7.5 max score), verbose text form
Oracle Critical Patch Update Advisory - July 2016 (22 fixes / 8.1 max score), verbose text form
Oracle Critical Patch Update Advisory - April 2016 (31 fixes / 9.8 max score), verbose text form
Oracle Critical Patch Update Advisory - January 2016 (22 fixes / 7.2 max score), verbose text form
Oracle Critical Patch Update Advisory - October 2015 (30 fixes / 9.0 max score), verbose text form
Oracle Critical Patch Update Advisory - July 2015 (18 fixes / 6.5 max score), verbose text form
Oracle Critical Patch Update Advisory - April 2015 (26 fixes / 10.0 max score), verbose text form
Oracle Critical Patch Update Advisory - January 2015 (9 fixes / 7.5 max score), verbose text form
Oracle Critical Patch Update Advisory - October 2014 (24 fixes / 8.0 max score)
Oracle Critical Patch Update Advisory - July 2014 (10 fixes / 6.5 max score)
Oracle Critical Patch Update Advisory - April 2014 (14 fixes / 6.5 max score)
Oracle Critical Patch Update Advisory - January 2014 (18 fixes / 10.0 max score)
Oracle Critical Patch Update Advisory - October 2013 (8 fixes / 8.5 max score)
Oracle Critical Patch Update Advisory - July 2013 (18 fixes / 6.8 max score)
Oracle Critical Patch Update Advisory - April 2013 (25 fixes / 6.8 max score)
Oracle Critical Patch Update Advisory - January 2013 (18 fixes / 9.0 max score)
Oracle Critical Patch Update Advisory - October 2012 (15 fixes / 9.0 max score)
Oracle Critical Patch Update Advisory - July 2012 (6 fixes / 6.8 max score)
Oracle Critical Patch Update Advisory - April 2012 (6 fixes / 6.8 max score)
Oracle Critical Patch Update Advisory - January 2012 (27 fixes / 5.5 max score)

RedHat/CentOS vulnerabilities by CVE name

Red Hat vulnerabilities by CVE name for MySQL

Redhat on FromDual GmbH