Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Mageia 9: 2025-0186 moderate: MariaDB crash and DOS risks

mageia
Calendar Grey June 11, 2025
Dist Mageia Esm H88
The recent MariaDB enhancements within Mageia tackle a range of security flaws, bolstering system robustness and protecting data accuracy for its community.
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log

Summary

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2 - CVE-2023-52969. MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where - CVE-2023-52970. MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan - CVE-2023-52971. Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (compl...

References

- https://bugs.mageia.org/show_bug.cgi?id=34342

- https://mariadb.com/docs/release-notes/community-server/11.4/11.4.7

- https://mariadb.com/docs/release-notes/community-server/11.4/11.4.6

- https://ubuntu.com/security/notices/USN-7548-1

- https://www.cve.org/CVERecord?id=CVE-2023-52969

- https://www.cve.org/CVERecord?id=CVE-2023-52970

- https://www.cve.org/CVERecord?id=CVE-2023-52971

- https://www.cve.org/CVERecord?id=CVE-2025-30693

- https://www.cve.org/CVERecord?id=CVE-2025-30722

Resolution

SRPMS

- 9/core/mariadb-11.4.7-1.mga9

Publication date: 11 Jun 2025
URL: https://advisories.mageia.org/MGASA-2025-0186.html
Type: security
CVE: CVE-2023-52969, CVE-2023-52970, CVE-2023-52971, CVE-2025-30693, CVE-2025-30722

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here