Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-0737

Опубликовано: 28 янв. 2025
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2025-0737: mariadb:10.11 security update (MODERATE)

galera [26.4.20-1]

  • Rebase to 26.4.20

[26.4.19-1]

  • Rebase to 26.4.19

[26.4.18-1]

  • Rebase to 26.4.18

Judy mariadb [3:10.11.10-1]

  • Rebase to 10.11.10

[3:10.11.9-1]

  • Rebase to 10.11.9

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

Module mariadb:10.11 is enabled

Judy

1.0.5-18.module+el8.10.0+90496+94bf9469

galera

26.4.20-1.module+el8.10.0+90496+94bf9469

mariadb

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-backup

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-common

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-devel

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-embedded

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-embedded-devel

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-errmsg

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-gssapi-server

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-oqgraph-engine

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-pam

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-server

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-server-galera

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-server-utils

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-test

10.11.10-1.module+el8.10.0+90496+94bf9469

Oracle Linux x86_64

Module mariadb:10.11 is enabled

Judy

1.0.5-18.module+el8.10.0+90496+94bf9469

galera

26.4.20-1.module+el8.10.0+90496+94bf9469

mariadb

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-backup

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-common

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-devel

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-embedded

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-embedded-devel

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-errmsg

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-gssapi-server

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-oqgraph-engine

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-pam

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-server

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-server-galera

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-server-utils

10.11.10-1.module+el8.10.0+90496+94bf9469

mariadb-test

10.11.10-1.module+el8.10.0+90496+94bf9469

Связанные CVE

Связанные уязвимости

CVSS3: 4.9
ubuntu
около 1 года назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).

CVSS3: 4.9
redhat
около 1 года назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).

CVSS3: 4.9
nvd
около 1 года назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).

CVSS3: 4.9
msrc
8 месяцев назад

Описание отсутствует

CVSS3: 4.9
debian
около 1 года назад

Vulnerability in the MySQL Server product of Oracle MySQL (component: ...

Уязвимость ELSA-2025-0737