Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d855200d by Salvatore Bonaccorso at 2024-09-17T20:17:54+02:00
Revert "MariaDB/MDEV-24176"
This reverts commit d142d9ed072253ebaba6d9d127c90c994c8d057a.
Should add an explanation of not-affected at source-level, maybe the
affected source code was introduced later?
Furthermore mariadb-10.1 is not anymore in a supported release by the
main security-tracker so maybe this triage should go into extended file
of ELTS tracker.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -198039,7 +198039,7 @@ CVE-2022-27456 (MariaDB Server v10.6.3 and below was
discovered to contain an us
- mariadb-10.5 <removed>
[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
- mariadb-10.3 <removed>
- - mariadb-10.1 <not-affected>
+ - mariadb-10.1 <removed>
NOTE: Bug MariaDB: https://jira.mariadb.org/browse/MDEV-28093
NOTE: Bug MariaDB (main): https://jira.mariadb.org/browse/MDEV-24176
NOTE: Same fix than CVE-2022-27376, CVE-2022-27379, CVE-2022-27447,
CVE-2022-27449, CVE-2022-27452
@@ -198064,7 +198064,7 @@ CVE-2022-27452 (MariaDB Server v10.9 and below was
discovered to contain a segme
- mariadb-10.5 <removed>
[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
- mariadb-10.3 <removed>
- - mariadb-10.1 <not-affected>
+ - mariadb-10.1 <removed>
NOTE: MariaDB bug: https://jira.mariadb.org/browse/MDEV-28090
NOTE: MariaDB main bug: https://jira.mariadb.org/browse/MDEV-24176
NOTE: Same fix than CVE-2022-27376, CVE-2022-27379, CVE-2022-27447,
CVE-2022-27449, CVE-2022-27456
@@ -198087,7 +198087,7 @@ CVE-2022-27449 (MariaDB Server v10.9 and below was
discovered to contain a segme
- mariadb-10.5 <removed>
[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
- mariadb-10.3 <removed>
- - mariadb-10.1 <not-affected>
+ - mariadb-10.1 <removed>
NOTE: MariaDB bug: https://jira.mariadb.org/browse/MDEV-28089
NOTE: MariaDB main bug: https://jira.mariadb.org/browse/MDEV-24176
NOTE: Same fix than CVE-2022-27376, CVE-2022-27379, CVE-2022-27447,
CVE-2022-27452, CVE-2022-27456
@@ -198111,7 +198111,7 @@ CVE-2022-27447 (MariaDB Server v10.9 and below was
discovered to contain a use-a
- mariadb-10.5 <removed>
[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
- mariadb-10.3 <removed>
- - mariadb-10.1 <not-affected>
+ - mariadb-10.1 <removed>
NOTE: MariaDB bug: https://jira.mariadb.org/browse/MDEV-28099
NOTE: MariaDB main bug: https://jira.mariadb.org/browse/MDEV-24176
NOTE: Same fix than CVE-2022-27376, CVE-2022-27379 and CVE-2022-27449,
CVE-2022-27452, CVE-2022-27456
@@ -198371,7 +198371,7 @@ CVE-2022-27379 (An issue in the component
Arg_comparator::compare_real_fixed of
- mariadb-10.5 <removed>
[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
- mariadb-10.3 <removed>
- - mariadb-10.1 <not-affected>
+ - mariadb-10.1 <removed>
NOTE: MariaDB bug: https://jira.mariadb.org/browse/MDEV-26353
NOTE: MariaDB bug (main): https://jira.mariadb.org/browse/MDEV-24176
NOTE: Same fix than CVE-2022-27376, CVE-2022-27447, CVE-2022-27449,
CVE-2022-27452, CVE-2022-27456
@@ -198402,7 +198402,7 @@ CVE-2022-27376 (MariaDB Server v10.6.5 and below was
discovered to contain an us
- mariadb-10.5 <removed>
[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
- mariadb-10.3 <removed>
- - mariadb-10.1 <not-affected>
+ - mariadb-10.1 <removed>
NOTE: Bug MariaDB: https://jira.mariadb.org/browse/MDEV-26354
NOTE: Bug MariaDB (duplicate):
https://jira.mariadb.org/browse/MDEV-26437
NOTE: Bug MariaDB (main): https://jira.mariadb.org/browse/MDEV-24176
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d855200d8d05d9470a68d26d0c26ed32760c8709
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d855200d8d05d9470a68d26d0c26ed32760c8709
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
