RHSA-2023:5684 — Red Hat Security Advisory: galera and mariadb security update

Fixed packages 37

Release	Package	Fixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream	galera	0:26.4.14-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	galera-debuginfo	0:26.4.14-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	galera-debugsource	0:26.4.14-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-backup	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-backup-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-common	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-debugsource	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-embedded	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-embedded-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-errmsg	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-gssapi-server	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-gssapi-server-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-oqgraph-engine	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-oqgraph-engine-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-pam	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-pam-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-server	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-server-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-server-galera	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-server-utils	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-server-utils-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream	mariadb-test-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-backup-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-debugsource	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-devel	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-embedded-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-embedded-devel	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-gssapi-server-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-oqgraph-engine-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-pam-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-server-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-server-utils-debuginfo	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-test	3:10.5.22-1.el9_2
Red Hat · RHEL 9 enterprise_linux:9::crb	mariadb-test-debuginfo	3:10.5.22-1.el9_2

Vulnerabilities 8

High 7.5

CVE-2023-5157

Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Sep 26, 2023
Medium 6.5

CVE-2022-47015

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mba…

mariadb-10.3 mariadb-10.6 mariadb mariadb Debian Ubuntu Azure Linux Alpine

Jan 20, 2023
Unscored —

CVE-2022-32081

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobas…

mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu Azure Linux Alpine

Jul 1, 2022
Unscored —

CVE-2022-32082

MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.

mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu Alpine

Jul 1, 2022
Unscored —

CVE-2022-32084

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu Alpine

Jul 1, 2022
Unscored —

CVE-2022-32089

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_lev…

mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu Alpine

Jul 1, 2022
Unscored —

CVE-2022-32091

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_commo…

mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu Azure Linux Alpine

Jul 1, 2022
Unscored —

CVE-2022-38791

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream …

mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu

Aug 27, 2022

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106028
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106030
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106034
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106035
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106042
report
https://bugzilla.redhat.com/show_bug.cgi?id=2130105
report
https://bugzilla.redhat.com/show_bug.cgi?id=2163609
report
https://bugzilla.redhat.com/show_bug.cgi?id=2240246
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5684.json
report
https://access.redhat.com/security/cve/CVE-2022-32081
advisory
https://www.cve.org/CVERecord?id=CVE-2022-32081
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-32081
report
https://access.redhat.com/security/cve/CVE-2022-32082
advisory
https://www.cve.org/CVERecord?id=CVE-2022-32082
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-32082
report
https://access.redhat.com/security/cve/CVE-2022-32084
advisory
https://www.cve.org/CVERecord?id=CVE-2022-32084
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-32084
report
https://access.redhat.com/security/cve/CVE-2022-32089
advisory
https://www.cve.org/CVERecord?id=CVE-2022-32089
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-32089
report
https://access.redhat.com/security/cve/CVE-2022-32091
advisory
https://www.cve.org/CVERecord?id=CVE-2022-32091
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-32091
report
https://access.redhat.com/security/cve/CVE-2022-38791
advisory
https://www.cve.org/CVERecord?id=CVE-2022-38791
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-38791
report
https://access.redhat.com/security/cve/CVE-2022-47015
advisory
https://www.cve.org/CVERecord?id=CVE-2022-47015
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-47015
report
https://access.redhat.com/security/cve/CVE-2023-5157
advisory
https://www.cve.org/CVERecord?id=CVE-2023-5157
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-5157

Red Hat Security Advisory: galera and mariadb security update

Fixed packages 37

Vulnerabilities 8

Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mba…

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobas…

MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_lev…

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_commo…

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream …

References