RLSA-2025:0737 Moderate: mariadb:10.11 security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fixes: mysql: Client: mysqldump unspecified vulnerability CPU Apr 2024 CVE-2024-21096 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and oth...

MariaDB 11.7.0 < 11.7.2

The version of MariaDB installed on the remote host is prior to 11.7.2. It is, therefore, affected by a vulnerability as referenced in the 11.7.2 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4...

Mageia: Security Advisory (MGASA-2025-0047)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Azure Linux 3.0 Security Update: mariadb (CVE-2024-5814)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5814 advisory. - A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it d...

Azure Linux 3.0 Security Update: mariadb (CVE-2024-2881)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2881 advisory. - Fault Injection vulnerability in wced25519signmsg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL...

Azure Linux 3.0 Security Update: mariadb (CVE-2024-1544)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1544 advisory. - Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular...

Azure Linux 3.0 Security Update: mariadb (CVE-2023-6937)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6937 advisory. - wolfSSL prior to 5.6.6 did not check that messages in one DTLS record do not span key boundaries. As a resul...

Azure Linux 3.0 Security Update: mariadb (CVE-2023-6936)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6936 advisory. - In wolfSSL prior to 5.6.6, if callback functions are enabled via the WOLFSSLCALLBACKS flag, then a malicious...

Azure Linux 3.0 Security Update: mariadb (CVE-2024-1543)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1543 advisory. - The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects against a side-...

Azure Linux 3.0 Security Update: mariadb (CVE-2024-5991)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5991 advisory. - In function MatchDomainName, input param str is treated as a NULL terminated string despite being user...

Azure Linux 3.0 Security Update: mariadb (CVE-2024-1545)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1545 advisory. - Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL...

Azure Linux 3.0 Security Update: mariadb (CVE-2024-5288)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5288 advisory. - An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, lead...

Azure Linux 3.0 Security Update: mariadb (CVE-2024-0901)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0901 advisory. - Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of...

Azure Linux 3.0 Security Update: mariadb (CVE-2023-6935)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6935 advisory. - wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing...

Updated mariadb packages fix security vulnerability

Bug fix release which fixes some memory leaks and crashes...

FreeBSD : MariaDB -- DoS vulnerability in InnoDB (7bcfca95-e563-11ef-873e-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7bcfca95-e563-11ef-873e-8447094a420f advisory. MariaDB reports: Easily exploitable vulnerability allows high privileged attacker with network access v...

AlmaLinux 9 : mariadb:10.11 (ALSA-2025:0912)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:0912 advisory. mysql: Client: mysqldump unspecified vulnerability CPU Apr 2024 CVE-2024-21096 Tenable has extracted the preceding description block directly from the AlmaLinux...

Slackware: Security Advisory (SSA:2025-036-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : galera / and / mariadb (ELSA-2025-0914)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0914 advisory. galera 26.4.20-1.0.1 - Drop nmap-ncat requirement. Orabug: 34116228 - Requirement to delete lp1184034 test case without using patches. 26.4.20-1 - Reba...

[slackware-security] mariadb

New mariadb packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mariadb-10.5.28-i586-1slack15.0.txz: Upgraded. This update fixes bugs and a security issue: Easily exploitable vulnerability allows...