Skip to content
OpenAdvisories
High ALSA-2023:5684 8 CVEs

Important: galera and mariadb security update

Published Oct 12, 2023 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: galera
(26.4.14), mariadb (10.5.22).

Security Fix(es):

* mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157)
* mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081)
* mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc (CVE-2022-32082)
* mariadb: segmentation fault via the component sub_select (CVE-2022-32084)
* mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089)
* mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)
* mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)
* mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 15

ReleasePackageFixed in
AlmaLinux · 9 galera 26.4.14-1.el9_2.alma.1
AlmaLinux · 9 mariadb 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-backup 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-common 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-devel 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-embedded 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-embedded-devel 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-errmsg 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-gssapi-server 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-oqgraph-engine 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-pam 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-server 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-server-galera 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-server-utils 3:10.5.22-1.el9_2.alma.1
AlmaLinux · 9 mariadb-test 3:10.5.22-1.el9_2.alma.1

Vulnerabilities 8

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-32081
  • report
    https://access.redhat.com/security/cve/CVE-2022-32082
  • report
    https://access.redhat.com/security/cve/CVE-2022-32084
  • report
    https://access.redhat.com/security/cve/CVE-2022-32089
  • report
    https://access.redhat.com/security/cve/CVE-2022-32091
  • report
    https://access.redhat.com/security/cve/CVE-2022-38791
  • report
    https://access.redhat.com/security/cve/CVE-2022-47015
  • report
    https://access.redhat.com/security/cve/CVE-2023-5157
  • report
    https://bugzilla.redhat.com/2106028
  • report
    https://bugzilla.redhat.com/2106030
  • report
    https://bugzilla.redhat.com/2106034
  • report
    https://bugzilla.redhat.com/2106035
  • report
    https://bugzilla.redhat.com/2106042
  • report
    https://bugzilla.redhat.com/2130105
  • report
    https://bugzilla.redhat.com/2163609
  • report
    https://bugzilla.redhat.com/2240246
  • advisory
    https://errata.almalinux.org/9/ALSA-2023-5684.html