Summary
Several security issues were discovered in MariaDB and this update
includes new upstream MariaDB versions to fix these issues.
MariaDB has been updated to 10.3.37 in Ubuntu 20.04 LTS and to 10.6.11
in Ubuntu 22.04 LTS and Ubuntu 22.10.
In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | mariadb-10.3 | 1:10.3.37-0ubuntu0.20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | mariadb-10.6 | 1:10.6.11-0ubuntu0.22.04.1 |
Vulnerabilities 36
-
High 7.5
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
-
High 7.5CVE-2022-27458 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…
-
Unscored —
MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is u…
-
Unscored —
MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, whic…
-
Unscored —
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), …
-
Unscored —
An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attacker…
-
Unscored —
An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allo…
-
Unscored —
An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers t…
-
Unscored —
An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cau…
-
Unscored —
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables…
-
Unscored —
MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which i…
-
Unscored —
An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to a…
-
Unscored —
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.
-
Unscored —
MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, wh…
-
Unscored —
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.
-
Unscored —
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.
-
Unscored —
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.
-
Unscored —
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer(…
-
Unscored —
There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0my…
-
Unscored —
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.
-
Unscored —
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.
-
Unscored —
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.
-
Unscored —
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /…
-
Unscored —
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_ty…
-
Unscored —
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strin…
-
Unscored —
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobas…
-
Unscored —
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
-
Unscored —
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cac…
-
Unscored —
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
-
Unscored —
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cle…
-
Unscored —
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.
-
Unscored —
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.
-
Unscored —
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Fi…
-
Unscored —
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_lev…
-
Unscored —
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_commo…
References
-
report
https://ubuntu.com/security/CVE-2018-25032
-
report
https://ubuntu.com/security/CVE-2021-46669
-
report
https://ubuntu.com/security/CVE-2022-21427
-
report
https://ubuntu.com/security/CVE-2022-27376
-
report
https://ubuntu.com/security/CVE-2022-27377
-
report
https://ubuntu.com/security/CVE-2022-27378
-
report
https://ubuntu.com/security/CVE-2022-27379
-
report
https://ubuntu.com/security/CVE-2022-27380
-
report
https://ubuntu.com/security/CVE-2022-27381
-
report
https://ubuntu.com/security/CVE-2022-27382
-
report
https://ubuntu.com/security/CVE-2022-27383
-
report
https://ubuntu.com/security/CVE-2022-27384
-
report
https://ubuntu.com/security/CVE-2022-27386
-
report
https://ubuntu.com/security/CVE-2022-27387
-
report
https://ubuntu.com/security/CVE-2022-27444
-
report
https://ubuntu.com/security/CVE-2022-27445
-
report
https://ubuntu.com/security/CVE-2022-27446
-
report
https://ubuntu.com/security/CVE-2022-27447
-
report
https://ubuntu.com/security/CVE-2022-27448
-
report
https://ubuntu.com/security/CVE-2022-27449
-
report
https://ubuntu.com/security/CVE-2022-27451
-
report
https://ubuntu.com/security/CVE-2022-27452
-
report
https://ubuntu.com/security/CVE-2022-27455
-
report
https://ubuntu.com/security/CVE-2022-27456
-
report
https://ubuntu.com/security/CVE-2022-27457
-
report
https://ubuntu.com/security/CVE-2022-27458
-
report
https://ubuntu.com/security/CVE-2022-32081
-
report
https://ubuntu.com/security/CVE-2022-32082
-
report
https://ubuntu.com/security/CVE-2022-32083
-
report
https://ubuntu.com/security/CVE-2022-32084
-
report
https://ubuntu.com/security/CVE-2022-32085
-
report
https://ubuntu.com/security/CVE-2022-32086
-
report
https://ubuntu.com/security/CVE-2022-32087
-
report
https://ubuntu.com/security/CVE-2022-32088
-
report
https://ubuntu.com/security/CVE-2022-32089
-
report
https://ubuntu.com/security/CVE-2022-32091