Skip to content
OpenAdvisories
Medium ALSA-2025:0914 2 CVEs

Moderate: galera and mariadb security update

Published Feb 4, 2025 · Updated Oct 29, 2026

Summary

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22084)
* mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 15

ReleasePackageFixed in
AlmaLinux · 9 galera 26.4.20-1.el9_5
AlmaLinux · 9 mariadb 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-backup 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-common 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-devel 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-embedded 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-embedded-devel 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-errmsg 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-gssapi-server 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-oqgraph-engine 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-pam 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-server 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-server-galera 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-server-utils 3:10.5.27-1.el9_5
AlmaLinux · 9 mariadb-test 3:10.5.27-1.el9_5

Vulnerabilities 2

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-22084
  • report
    https://access.redhat.com/security/cve/CVE-2024-21096
  • report
    https://bugzilla.redhat.com/2245023
  • report
    https://bugzilla.redhat.com/2275452
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-0914.html