Описание
Security update for mariadb
This update for mariadb fixes the following issues:
Update to 10.5.17:
-
CVE-2022-32082: Fixed assertion failure at table->get_ref_count() == 0 in dict0dict.cc (bsc#1201162).
-
CVE-2022-32089: Fixed segmentation fault via the component st_select_lex_unit::exclude_level (bsc#1201169).
-
CVE-2022-32081: Fixed use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc (bsc#1201161).
-
CVE-2022-32091: Fixed use-after-poison in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc (bsc#1201170).
-
CVE-2022-32084: Fixed segmentation fault via the component sub_select (bsc#1201164).
-
CVE-2022-38791: Fixed deadlock in compress_write in extra/mariabackup/ds_compress.cc (bsc#1202863).
-
CVE-2022-32088: Fixed segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort (bsc#1201168).
-
CVE-2022-32087: Fixed segmentation fault via the component Item_args::walk_args (bsc#1201167).
-
CVE-2022-32086: Fixed segmentation fault via the component Item_field::fix_outer_field (bsc#1201166).
-
CVE-2022-32085: Fixed segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor (bsc#1201165).
-
CVE-2022-32083: Fixed segmentation fault via the component Item_subselect::init_expr_cache_tracker (bsc#1201163).
Bugfixes:
- Fixed mysql-systemd-helper being unaware of custom group (bsc#1200105).
Список пакетов
SUSE Linux Enterprise Module for Package Hub 15 SP3
SUSE Linux Enterprise Module for Server Applications 15 SP3
openSUSE Leap 15.3
Ссылки
- Link for SUSE-SU-2022:3391-1
- E-Mail link for SUSE-SU-2022:3391-1
- SUSE Security Ratings
- SUSE Bug 1200105
- SUSE Bug 1201161
- SUSE Bug 1201162
- SUSE Bug 1201163
- SUSE Bug 1201164
- SUSE Bug 1201165
- SUSE Bug 1201166
- SUSE Bug 1201167
- SUSE Bug 1201168
- SUSE Bug 1201169
- SUSE Bug 1201170
- SUSE Bug 1202863
- SUSE CVE CVE-2022-32081 page
- SUSE CVE CVE-2022-32082 page
- SUSE CVE CVE-2022-32083 page
- SUSE CVE CVE-2022-32084 page
- SUSE CVE CVE-2022-32085 page
Описание
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
Затронутые продукты
Ссылки
- CVE-2022-32081
- SUSE Bug 1201161
Описание
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
Затронутые продукты
Ссылки
- CVE-2022-32082
- SUSE Bug 1201162
Описание
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.
Затронутые продукты
Ссылки
- CVE-2022-32083
- SUSE Bug 1201163
Описание
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
Затронутые продукты
Ссылки
- CVE-2022-32084
- SUSE Bug 1201164
Описание
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
Затронутые продукты
Ссылки
- CVE-2022-32085
- SUSE Bug 1201165
Описание
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.
Затронутые продукты
Ссылки
- CVE-2022-32086
- SUSE Bug 1201166
Описание
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.
Затронутые продукты
Ссылки
- CVE-2022-32087
- SUSE Bug 1201167
Описание
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
Затронутые продукты
Ссылки
- CVE-2022-32088
- SUSE Bug 1201168
Описание
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.
Затронутые продукты
Ссылки
- CVE-2022-32089
- SUSE Bug 1201169
Описание
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.
Затронутые продукты
Ссылки
- CVE-2022-32091
- SUSE Bug 1201170
Описание
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
Затронутые продукты
Ссылки
- CVE-2022-38791
- SUSE Bug 1202863