Red Hat Security Advisory: galera and mariadb security update

Fixed packages 37

Vulnerabilities 8

• High 7.5
  CVE-2023-5157

  Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

  A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Sep 26, 2023
• Medium 6.5
  CVE-2022-47015

  MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mba…

  mariadb-10.3 mariadb-10.6 mariadb mariadb Debian Ubuntu Azure Linux Alpine
  Jan 20, 2023
• Unscored —
  CVE-2022-32081

  MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobas…

  mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu Azure Linux Alpine
  Jul 1, 2022
• Unscored —
  CVE-2022-32082

  MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.

  mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu Alpine
  Jul 1, 2022
• Unscored —
  CVE-2022-32084

  MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

  mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu Alpine
  Jul 1, 2022
• Unscored —
  CVE-2022-32089

  MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_lev…

  mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu Alpine
  Jul 1, 2022
• Unscored —
  CVE-2022-32091

  MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_commo…

  mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu Azure Linux Alpine
  Jul 1, 2022
• Unscored —
  CVE-2022-38791

  In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream …

  mariadb-10.3 mariadb-10.0 mariadb-10.1 mariadb-10.6 Debian Ubuntu
  Aug 27, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2240246
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6883.json
• report
  https://access.redhat.com/security/cve/CVE-2022-32081
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2106028
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-32081
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-32081
• report
  https://access.redhat.com/security/cve/CVE-2022-32082
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2106030
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-32082
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-32082
• report
  https://access.redhat.com/security/cve/CVE-2022-32084
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2106034
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-32084
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-32084
• report
  https://access.redhat.com/security/cve/CVE-2022-32089
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2106035
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-32089
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-32089
• report
  https://access.redhat.com/security/cve/CVE-2022-32091
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2106042
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-32091
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-32091
• report
  https://access.redhat.com/security/cve/CVE-2022-38791
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2130105
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-38791
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-38791
• report
  https://access.redhat.com/security/cve/CVE-2022-47015
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2163609
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-47015
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-47015
• report
  https://access.redhat.com/security/cve/CVE-2023-5157
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-5157
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-5157