RHSA-2023:5259MediumCVSS 7.5

Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update

Published
September 19, 2023
Last Modified
November 7, 2026

🔗 CVE IDs covered (5)

CVE-2022-47015 →CVE-2023-5157 →CVE-2022-32084 →CVE-2022-32091 →CVE-2022-38791 →

📋 Description

CVE-2022-32084 — mariadb: segmentation fault via the component sub_select CVE-2022-32091 — mariadb: server crash in JOIN_CACHE::free or in copy_fields CVE-2022-38791 — mariadb: compress_write() fails to release mutex on failure CVE-2022-47015 — mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() CVE-2023-5157 — mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6

🎯 Affected products116

  • Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.src (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-debuginfo-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • Judy-debugsource-0:1.0.5-18.module+el8+2765+cfa4f87b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.src (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-debuginfo-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-debuginfo-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-debuginfo-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-debuginfo-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-debugsource-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-debugsource-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-debugsource-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • galera-debugsource-0:25.3.37-1.module+el8.8.0+19444+aac3c36b.x86_64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • mariadb-3:10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64 (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • mariadb-3:10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • mariadb-3:10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x (mariadb:10.3) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +86 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically.

🔗 References (11)