Security controls bypass or absence In mariadb-10.5
Description
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | 1:10.5.18-0+deb11u1 | ||
 rpm rhel8 | 3:10.3.39-1.module+el8.8.0+19673+72b0d35f | ||
rpm rhel9.0 | 0:26.4.14-1.el9_0 | ||
rpm rhel7 | - | - | |
rpm rhel8.6 | 3:10.5.22-1.module+el8.6.0+20274+5db7ad9f | ||
rpm rhel9 | 3:10.5.22-1.el9_2 | ||
rpm rhel9.0 | 3:10.5.22-1.el9_0 |
Aliases
1. 2. 3. 4. 5.