mariadb-10.5 - security update
mariadb-10.5 - security update
- Update to 1:10.5.29-0+deb11u1
Published Updated
PatchFirst · Latest vulnerabilities
mariadb-10.5 vulnerabilities
Vulnerabilities published for mariadb-10.5 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 73
mariadb-10.5 - security update
mariadb-10.5 - security update
- Update to 1:10.5.28-0+deb11u2
Published UpdatedCVE-2023-52968
MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.
- Update to 1:10.5.26-0+deb11u1
Published Updatedmariadb-10.5 - security update
mariadb-10.5 - security update
- Update to 1:10.5.28-0+deb11u1
Published Updatedmariadb-10.5 - security update
mariadb-10.5 - security update
- Update to 1:10.5.26-0+deb11u2
Published UpdatedCVE-2022-38791
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-32088
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-32087
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-32086
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-32085
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-32083
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-32091
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-32089
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-32084
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-32082
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-32081
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
- Update to 1:10.5.18-0+deb11u1
Published UpdatedCVE-2022-31624
MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
- Update to 1:10.5.15-0+deb11u1
Published UpdatedCVE-2022-31623
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
- Update to 1:10.5.15-0+deb11u1
Published UpdatedCVE-2022-31622
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
- Update to 1:10.5.15-0+deb11u1
Published UpdatedCVE-2022-31621
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs (stream_ctxt->dest_file == NULL) while executing the method xbstream_open, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
- Update to 1:10.5.15-0+deb11u1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.