Summary
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.
The following packages have been upgraded to a later upstream version: galera
(26.4.14), mariadb (10.5.22).
Security Fix(es):
* mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157)
* mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081)
* mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc (CVE-2022-32082)
* mariadb: segmentation fault via the component sub_select (CVE-2022-32084)
* mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089)
* mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)
* mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)
* mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | galera | 0:26.4.14-1.module+el8.8.0+1490+31c52b1f |
| Rocky Linux · 8 | Judy | 0:1.0.5-18.module+el8.4.0+427+adf35707 |
| Rocky Linux · 8 | mariadb | 3:10.5.22-1.module+el8.8.0+1490+31c52b1f |
Vulnerabilities 8
-
High 7.5
Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
-
Medium 6.5
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mba…
-
Unscored —
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobas…
-
Unscored —
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
-
Unscored —
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
-
Unscored —
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_lev…
-
Unscored —
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_commo…
-
Unscored —
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream …
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106028
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106030
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106034
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106035
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2106042
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2130105
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2163609
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2240246