mariadb: CVE-2022-47015

Debian Bug report logs - #1034889
mariadb: CVE-2022-47015

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Mühlenhoff <jmm@inutil.org>

To: submit@bugs.debian.org

Subject: mariadb: CVE-2022-47015

Date: Wed, 26 Apr 2023 19:36:34 +0200

Source: mariadb
X-Debbugs-CC: team@security.debian.org
Severity: normal
Tags: security

Hi,

The following vulnerability was published for mariadb.

CVE-2022-47015[0]:
| MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of
| Service. It is possible for function spider_db_mbase::print_warnings
| to dereference a null pointer.

https://jira.mariadb.org/browse/MDEV-29644, fixed in 10.11.3


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2022-47015
    https://www.cve.org/CVERecord?id=CVE-2022-47015

Please adjust the affected versions in the BTS as needed.

Message #10 received at 1034889@bugs.debian.org (full text, mbox, reply):

From: Otto Kekäläinen <otto@debian.org>

To: Moritz Mühlenhoff <jmm@inutil.org>, 1034889@bugs.debian.org

Subject: Re: Bug#1034889: mariadb: CVE-2022-47015

Date: Wed, 26 Apr 2023 11:28:07 -0700

[Message part 1 (text/plain, inline)]

This will be fixed as part of next upstream maintenance release update in
all versions of Debian and Ubuntu. I expect to do it in coming 1-2 weeks.

[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.