Summary
Several security issues were discovered in MariaDB and this update includes
new upstream MariaDB versions to fix these issues.
MariaDB has been updated to 10.3.34 in Ubuntu 20.04 LTS and to 10.5.15 in
Ubuntu 21.10.
In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | mariadb-10.3 | 1:10.3.34-0ubuntu0.20.04.1 |
Vulnerabilities 10
-
High 7.0
MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allow…
-
High 7.0
MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attac…
-
High 7.0
MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attack…
-
High 7.0
MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows…
-
Unscored —
MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to…
-
Unscored —
MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common …
-
Unscored —
MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.
-
Unscored —
MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.
-
Unscored —
MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.
-
Unscored —
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact…
References
-
report
https://ubuntu.com/security/CVE-2021-46659
-
report
https://ubuntu.com/security/CVE-2021-46661
-
report
https://ubuntu.com/security/CVE-2021-46663
-
report
https://ubuntu.com/security/CVE-2021-46664
-
report
https://ubuntu.com/security/CVE-2021-46665
-
report
https://ubuntu.com/security/CVE-2021-46668
-
report
https://ubuntu.com/security/CVE-2022-24048
-
report
https://ubuntu.com/security/CVE-2022-24050
-
report
https://ubuntu.com/security/CVE-2022-24051
-
report
https://ubuntu.com/security/CVE-2022-24052