{"schema_version":"1.7.3","id":"SUSE-SU-2023:0631-1","published":"2023-03-06T13:14:57Z","modified":"2026-02-04T03:34:21.143256Z","related":["CVE-2022-21595","CVE-2022-38791"],"upstream":["CVE-2022-21595","CVE-2022-38791"],"summary":"security update for mariadb","details":"This update for mariadb fixes the following issues:\n\n- CVE-2022-38791: Fixed deadlock in compress_write in extra/mariabackup/ds_compress.cc (bsc#1202863).\n\nVersion update from 10.4.26 to 10.4.28 (fixes CVE-2022-38791 and CVE-2022-38791).\n\n- Update to 10.4.28:\n  * https://mariadb.com/kb/en/library/mariadb-10428-release-notes\n  * https://mariadb.com/kb/en/library/mariadb-10428-changelog\n  * https://mariadb.com/kb/en/library/mariadb-10427-release-notes\n  * https://mariadb.com/kb/en/library/mariadb-10427-changelog\n\n- Update list of skipped tests\n- Update mariadb.keyring\n","affected":[{"package":{"name":"mariadb","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","purl":"pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.28-150200.3.38.1"}]}],"ecosystem_specific":{"binaries":[{"libmariadbd-devel":"10.4.28-150200.3.38.1","libmariadbd19":"10.4.28-150200.3.38.1","mariadb":"10.4.28-150200.3.38.1","mariadb-client":"10.4.28-150200.3.38.1","mariadb-errormessages":"10.4.28-150200.3.38.1","mariadb-tools":"10.4.28-150200.3.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0631-1.json"}},{"package":{"name":"mariadb","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","purl":"pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.28-150200.3.38.1"}]}],"ecosystem_specific":{"binaries":[{"libmariadbd-devel":"10.4.28-150200.3.38.1","libmariadbd19":"10.4.28-150200.3.38.1","mariadb":"10.4.28-150200.3.38.1","mariadb-client":"10.4.28-150200.3.38.1","mariadb-errormessages":"10.4.28-150200.3.38.1","mariadb-tools":"10.4.28-150200.3.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0631-1.json"}},{"package":{"name":"mariadb","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","purl":"pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.28-150200.3.38.1"}]}],"ecosystem_specific":{"binaries":[{"libmariadbd-devel":"10.4.28-150200.3.38.1","libmariadbd19":"10.4.28-150200.3.38.1","mariadb":"10.4.28-150200.3.38.1","mariadb-client":"10.4.28-150200.3.38.1","mariadb-errormessages":"10.4.28-150200.3.38.1","mariadb-tools":"10.4.28-150200.3.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0631-1.json"}},{"package":{"name":"mariadb","ecosystem":"SUSE:Enterprise Storage 7","purl":"pkg:rpm/suse/mariadb&distro=SUSE%20Enterprise%20Storage%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4.28-150200.3.38.1"}]}],"ecosystem_specific":{"binaries":[{"libmariadbd-devel":"10.4.28-150200.3.38.1","libmariadbd19":"10.4.28-150200.3.38.1","mariadb":"10.4.28-150200.3.38.1","mariadb-client":"10.4.28-150200.3.38.1","mariadb-errormessages":"10.4.28-150200.3.38.1","mariadb-tools":"10.4.28-150200.3.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0631-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230631-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1202863"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-21595"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-38791"}]}