Issued:

2023-09-19

Updated:

2023-09-19

RHSA-2023:5259 - Moderate: mariadb:10.3 security, bug fix, and enhancement update

Synopsis

Moderate: mariadb:10.3 security, bug fix, and enhancement update

Type/Severity

Security Advisory Moderate

Topic

An update for the mariadb:10.3 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: mariadb (10.3). (BZ#2223572, BZ#2223574, BZ#2223962, BZ#2223965)

Security Fix(es):

• mariadb: segmentation fault via the component sub_select (CVE-2022-32084)

• mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)

• mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)

• mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• [MariaDB 10.3.32] socat: E Failed to set SNI host "" (SST failure) (BZ#2223961)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically.

Affected Products

Updated Packages

• mariadb-server-galera-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-embedded-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-server-utils-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-server-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-embedded-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-oqgraph-engine-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-10.3.39-1.module+el8.8.0+19673+72b0d35f.src.rpm
• Judy-1.0.5-18.module+el8+2765+cfa4f87b.x86_64.rpm
• galera-debuginfo-25.3.37-1.module+el8.8.0+19444+aac3c36b.x86_64.rpm
• mariadb-devel-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-embedded-devel-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-test-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-backup-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-gssapi-server-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-common-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• galera-25.3.37-1.module+el8.8.0+19444+aac3c36b.x86_64.rpm
• mariadb-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• Judy-1.0.5-18.module+el8+2765+cfa4f87b.src.rpm
• Judy-debugsource-1.0.5-18.module+el8+2765+cfa4f87b.x86_64.rpm
• mariadb-gssapi-server-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-server-utils-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• galera-25.3.37-1.module+el8.8.0+19444+aac3c36b.src.rpm
• Judy-debuginfo-1.0.5-18.module+el8+2765+cfa4f87b.x86_64.rpm
• mariadb-oqgraph-engine-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-debugsource-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-backup-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-errmsg-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• galera-debugsource-25.3.37-1.module+el8.8.0+19444+aac3c36b.x86_64.rpm
• mariadb-server-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-test-10.3.39-1.module+el8.8.0+19673+72b0d35f.x86_64.rpm
• mariadb-server-galera-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-embedded-devel-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-gssapi-server-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• Judy-debuginfo-1.0.5-18.module+el8+2765+cfa4f87b.ppc64le.rpm
• mariadb-server-utils-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• galera-debuginfo-25.3.37-1.module+el8.8.0+19444+aac3c36b.ppc64le.rpm
• mariadb-test-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• galera-25.3.37-1.module+el8.8.0+19444+aac3c36b.ppc64le.rpm
• galera-debugsource-25.3.37-1.module+el8.8.0+19444+aac3c36b.ppc64le.rpm
• mariadb-backup-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-test-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-gssapi-server-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• Judy-debugsource-1.0.5-18.module+el8+2765+cfa4f87b.ppc64le.rpm
• mariadb-server-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-oqgraph-engine-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-server-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-devel-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-errmsg-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• Judy-1.0.5-18.module+el8+2765+cfa4f87b.ppc64le.rpm
• mariadb-backup-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-embedded-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-embedded-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-server-utils-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-common-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-debugsource-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-oqgraph-engine-10.3.39-1.module+el8.8.0+19673+72b0d35f.ppc64le.rpm
• mariadb-debugsource-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-server-utils-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-oqgraph-engine-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-common-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-server-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-devel-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-server-utils-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-gssapi-server-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-backup-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-gssapi-server-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-embedded-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• galera-debugsource-25.3.37-1.module+el8.8.0+19444+aac3c36b.aarch64.rpm
• mariadb-server-galera-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• Judy-debugsource-1.0.5-18.module+el8+2765+cfa4f87b.aarch64.rpm
• mariadb-embedded-devel-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-server-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• galera-25.3.37-1.module+el8.8.0+19444+aac3c36b.aarch64.rpm
• mariadb-test-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-oqgraph-engine-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• Judy-1.0.5-18.module+el8+2765+cfa4f87b.aarch64.rpm
• mariadb-errmsg-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-backup-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• mariadb-test-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• Judy-debuginfo-1.0.5-18.module+el8+2765+cfa4f87b.aarch64.rpm
• mariadb-embedded-10.3.39-1.module+el8.8.0+19673+72b0d35f.aarch64.rpm
• galera-debuginfo-25.3.37-1.module+el8.8.0+19444+aac3c36b.aarch64.rpm
• mariadb-server-utils-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-debugsource-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-devel-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-server-utils-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• galera-25.3.37-1.module+el8.8.0+19444+aac3c36b.s390x.rpm
• mariadb-embedded-devel-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• galera-debugsource-25.3.37-1.module+el8.8.0+19444+aac3c36b.s390x.rpm
• mariadb-gssapi-server-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-embedded-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-embedded-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-oqgraph-engine-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-gssapi-server-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-server-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-server-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-oqgraph-engine-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-test-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-errmsg-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-backup-debuginfo-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-test-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-common-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• mariadb-backup-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• Judy-debuginfo-1.0.5-18.module+el8+2765+cfa4f87b.s390x.rpm
• galera-debuginfo-25.3.37-1.module+el8.8.0+19444+aac3c36b.s390x.rpm
• Judy-debugsource-1.0.5-18.module+el8+2765+cfa4f87b.s390x.rpm
• mariadb-server-galera-10.3.39-1.module+el8.8.0+19673+72b0d35f.s390x.rpm
• Judy-1.0.5-18.module+el8+2765+cfa4f87b.s390x.rpm

Fixes

• This content is not included.BZ - 2106034
• This content is not included.BZ - 2106042
• This content is not included.BZ - 2130105
• This content is not included.BZ - 2163609
• This content is not included.BZ - 2223572
• This content is not included.BZ - 2223574
• This content is not included.BZ - 2223961
• This content is not included.BZ - 2223962

CVEs

• CVE-2022-32084
• CVE-2022-32091
• CVE-2022-38791
• CVE-2022-47015
• CVE-2023-5157

References

• https://access.redhat.com/security/updates/classification/#moderate

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.