Skip to content
OpenAdvisories
Medium ALSA-2025:19584 5 CVEs

Moderate: galera and mariadb security update

Published Nov 4, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

Galera is a fast synchronous multimaster wsrep provider (replication engine) for transactional databases and similar applications. For more information about wsrep API see <https://github.com/codership/wsrep-API> repository. For a description of Galera replication engine see <https://www.galeracluster.com> web.

Security Fix(es):

* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
* mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
* mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
* mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 15

ReleasePackageFixed in
AlmaLinux · 9 galera 26.4.22-1.el9_6
AlmaLinux · 9 mariadb 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-backup 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-common 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-devel 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-embedded 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-embedded-devel 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-errmsg 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-gssapi-server 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-oqgraph-engine 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-pam 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-server 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-server-galera 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-server-utils 3:10.5.29-2.el9_6
AlmaLinux · 9 mariadb-test 3:10.5.29-2.el9_6

Vulnerabilities 5

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-52969
  • report
    https://access.redhat.com/security/cve/CVE-2023-52970
  • report
    https://access.redhat.com/security/cve/CVE-2025-21490
  • report
    https://access.redhat.com/security/cve/CVE-2025-30693
  • report
    https://access.redhat.com/security/cve/CVE-2025-30722
  • report
    https://bugzilla.redhat.com/2339221
  • report
    https://bugzilla.redhat.com/2350916
  • report
    https://bugzilla.redhat.com/2350918
  • report
    https://bugzilla.redhat.com/2359885
  • report
    https://bugzilla.redhat.com/2359963
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-19584.html