Summary
galera
[26.4.14-1]
- Rebase to 26.4.14
[26.4.13-1]
- Rebase to 26.4.13
[26.4.12-1]
- Rebase to 26.4.12
Judy
mariadb
[3:10.5.22-1]
- Rebase to 10.5.22
[3:10.5.21-1]
- Rebase to version 10.5.21
[3:10.5.20-2]
- Use _fortify_level to disable fortification in debug builds
[3:10.5.20-1]
- Rebase to version 10.5.20
[3:10.5.18-1]
- Rebase to 10.5.18
- OpenSSL 3 patch upstreamed
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | galera | 0:26.4.14-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | Judy | 0:1.0.5-18.module+el8.4.0+20040+caf70fad |
| Oracle Linux · 8 | mariadb | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-backup | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-common | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-devel | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-embedded | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-embedded-devel | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-errmsg | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-gssapi-server | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-oqgraph-engine | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-pam | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-server | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-server-galera | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-server-utils | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
| Oracle Linux · 8 | mariadb-test | 3:10.5.22-1.module+el8.8.0+21173+e955d7af |
Vulnerabilities 8
-
High 7.5
Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
-
Medium 6.5
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mba…
-
Unscored —
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobas…
-
Unscored —
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
-
Unscored —
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
-
Unscored —
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_lev…
-
Unscored —
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_commo…
-
Unscored —
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream …