Debian: DLA-4208-1 Critical: MariaDB 10.5 DoS and Data Access Issues

Vulnerabilities was discovered in MariaDB, a SQL database server
compatible with MySQL.

CVE-2025-30693

Easily exploitable vulnerability allows high privileged
attacker with network access via multiple protocols to
compromise MariaDB Server. Successful attacks of this
vulnerability can result in unauthorized ability to
cause a hang or frequently repeatable crash (complete DoS)
of MariaDB Server as well as unauthorized update, insert or
delete access to some of MariaDB Server accessible data.

CVE-2025-30722

Difficult to exploit vulnerability allows low
privileged attacker with network access via multiple
protocols to compromise MariaDB Client. Successful attacks
of this vulnerability can result in unauthorized access
to critical data or complete access to all MariaDB Client
accessible data as well as unauthorized update, insert
or delete access to some of MariaDB Client accessible data


For Debian 11 bullseye, these problems have been fixed in version