FlawAtlas
Search the atlas
ALSA-2023:5259 Not scored

Moderate: mariadb:10.3 security, bug fix, and enhancement update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3). (BZ#2223572, BZ#2223574, BZ#2223962, BZ#2223965) Security Fix(es): * mariadb: segmentation fault via the component sub_select (CVE-2022-32084) * mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091) * mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791) * mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [MariaDB 10.3.32] socat: E Failed to set SNI host "" (SST failure) (BZ#2223961)

Exploit probability Not scored
Published September 19, 2023
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

AlmaLinux:8 Judy
AlmaLinux:8 galera
AlmaLinux:8 mariadb
AlmaLinux:8 mariadb-backup
AlmaLinux:8 mariadb-common
AlmaLinux:8 mariadb-devel
AlmaLinux:8 mariadb-embedded
AlmaLinux:8 mariadb-embedded-devel
AlmaLinux:8 mariadb-errmsg
AlmaLinux:8 mariadb-gssapi-server
AlmaLinux:8 mariadb-oqgraph-engine
AlmaLinux:8 mariadb-server
AlmaLinux:8 mariadb-server-galera
AlmaLinux:8 mariadb-server-utils
AlmaLinux:8 mariadb-test

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities ALSA-2023:5259

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3). (BZ#2223572, BZ#2223574, BZ#2223962, BZ#2223965) Security Fix(es): * mariadb: segmentation fault via the component sub_select (CVE-2022-32084) * mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091) * mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791) * mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [MariaDB 10.3.32] socat: E Failed to set SNI host "" (SST failure) (BZ#2223961)

View original source

05 / REFERENCES

Further evidence