openSUSE: Security Advisory for mariadb (SUSE-SU-2022:3159-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:3159-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-31624 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-31624 affecting package mariadb for versions less than 10.6.9-1. This CVE either no longer is or was never applicable...

CVE-2022-31621 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-31621 affecting package mariadb for versions less than 10.6.9-1. This CVE either no longer is or was never applicable...

CVE-2022-27446 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-27446 affecting package mariadb for versions less than 10.6.9-1. This CVE either no longer is or was never applicable...

CVE-2022-32081 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-32081 affecting package mariadb for versions less than 10.6.9-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-31622 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-31622 affecting package mariadb for versions less than 10.6.9-1. This CVE either no longer is or was never applicable...

CVE-2022-27444 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-27444 affecting package mariadb for versions less than 10.6.9-1. This CVE either no longer is or was never applicable...

CVE-2022-27385 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-27385 affecting package mariadb for versions less than 10.6.9-1. This CVE either no longer is or was never applicable...

CVE-2022-27382 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-27382 affecting package mariadb for versions less than 10.6.9-1. This CVE either no longer is or was never applicable...

CVE-2022-31623 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-31623 affecting package mariadb for versions less than 10.6.9-1. This CVE either no longer is or was never applicable...

CVE-2022-27452 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-27452 affecting package mariadb for versions less than 10.6.9-1. This CVE either no longer is or was never applicable...

CVE-2022-32091 affecting package mariadb for versions less than 10.6.9-1

CVE-2022-32091 affecting package mariadb for versions less than 10.6.9-1. An upgraded version of the package is available that resolves this issue...

SUSE-SU-2022:3159-1 Security update for mariadb

This update for mariadb fixes the following issues: - Updated to 10.6.9: - CVE-2022-32082: Fixed a reachable assertion that would crash the server bsc1201162. - CVE-2022-32089: Fixed a segmentation fault that coudl be triggered via a crafted query bsc1201169. - CVE-2022-32081: Fixed a buffer...

Amazon Linux 2022 : mariadb105, mariadb105-backup, mariadb105-common (ALAS2022-2022-069)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-069 advisory. MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW. CVE-2021-46659 MariaDB through 10.5.9 allows an application cras...

dict0dict.cc Component DoS

The vulnerability of the dict0dict.cc component in the MariaDB database management system is related to the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Amazon Linux 2022 : mariadb105, mariadb105-backup, mariadb105-common (ALAS2022-2022-096)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-096 advisory. A use-after-free vulnerability was found in MariaDB. This flaw allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used, resulting in a denial of service...

In MariaDB before 10.9.2 compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure which allows local users to trigger a deadlock.

...

mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)

MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...

mariadb: assertion failure in compare_order_elements

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlwindow.cc, impacting availability...