Skip to content
OpenAdvisories
High ALSA-2023:5683 8 CVEs

Important: mariadb:10.5 security update

Published Oct 12, 2023 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: galera
(26.4.14), mariadb (10.5.22).

Security Fix(es):

* mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157)
* mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081)
* mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc (CVE-2022-32082)
* mariadb: segmentation fault via the component sub_select (CVE-2022-32084)
* mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089)
* mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)
* mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)
* mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 17

ReleasePackageFixed in
AlmaLinux · 8 galera 26.4.14-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 Judy 1.0.5-18.module_el8.6.0+3139+3c630e87
AlmaLinux · 8 Judy 1.0.5-18.module_el8.6.0+3072+3c630e87
AlmaLinux · 8 mariadb 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-backup 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-common 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-devel 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-embedded 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-embedded-devel 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-errmsg 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-gssapi-server 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-oqgraph-engine 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-pam 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-server 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-server-galera 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-server-utils 3:10.5.22-1.module_el8.8.0+3620+5d452900
AlmaLinux · 8 mariadb-test 3:10.5.22-1.module_el8.8.0+3620+5d452900

Vulnerabilities 8

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-32081
  • report
    https://access.redhat.com/security/cve/CVE-2022-32082
  • report
    https://access.redhat.com/security/cve/CVE-2022-32084
  • report
    https://access.redhat.com/security/cve/CVE-2022-32089
  • report
    https://access.redhat.com/security/cve/CVE-2022-32091
  • report
    https://access.redhat.com/security/cve/CVE-2022-38791
  • report
    https://access.redhat.com/security/cve/CVE-2022-47015
  • report
    https://access.redhat.com/security/cve/CVE-2023-5157
  • report
    https://bugzilla.redhat.com/2106028
  • report
    https://bugzilla.redhat.com/2106030
  • report
    https://bugzilla.redhat.com/2106034
  • report
    https://bugzilla.redhat.com/2106035
  • report
    https://bugzilla.redhat.com/2106042
  • report
    https://bugzilla.redhat.com/2130105
  • report
    https://bugzilla.redhat.com/2163609
  • report
    https://bugzilla.redhat.com/2240246
  • advisory
    https://errata.almalinux.org/8/ALSA-2023-5683.html