[Git][security-tracker-team/security-tracker][master] CVE-2022-27378/mariadb-10.1

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0aca6411 by Bastien Roucariès at 2024-09-17T17:18:30+00:00
CVE-2022-27378/mariadb-10.1

Exploit tested in stretch chroot fail with syntax error.

Vcolumn with default is not supported before 10.2

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -198382,7 +198382,7 @@ CVE-2022-27378 (An issue in the component Create_tmp_table::finalize of MariaDB
 	- mariadb-10.5 <removed>
 	[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
 	- mariadb-10.3 <removed>
-	- mariadb-10.1 <removed>
+	- mariadb-10.1 <not-affected> (exploit fail with syntax error. virtual column with default introduced later)
 	NOTE: https://jira.mariadb.org/browse/MDEV-26423
 	NOTE: Regression of MDEV-10780 and MDEV-11265 (https://github.com/MariaDB/server/commit/e4e25d2bac comment)
 	NOTE: Commit MariaDB: https://github.com/MariaDB/server/commit/e4e25d2bac (10.2.44)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0aca641101dbb7f7e1471a6500173315c832afcd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0aca641101dbb7f7e1471a6500173315c832afcd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240917/f7c660af/attachment.htm>