[Git][security-tracker-team/security-tracker][master] CVE-2023-52971/mariaDB

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b1e2fff2 by Bastien Roucariès at 2025-04-19T17:51:24+02:00
CVE-2023-52971/mariaDB

report was made public.

Unreproducible before 10.9

Mark fixed version

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14482,8 +14482,10 @@ CVE-2025-1362 (The URL Shortener | Conversion Tracking  | AB Testing  | WooComme
 CVE-2023-52971 (MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes i ...)
 	- mariadb <unfixed> (bug #1100437)
 	[bookworm] - mariadb <no-dsa> (Minor issue)
-	- mariadb-10.5 <removed>
-	NOTE: https://jira.mariadb.org/browse/MDEV-32084 (not public)
+	- mariadb-10.5 <not-affected>
+	NOTE: https://jira.mariadb.org/browse/MDEV-32084
+	NOTE: Fixed in MariaDB: 10.11.12, 11.4.6, 11.8.2
+	NOTE: MariaDB commit: https://github.com/MariaDB/server/commit/3b4de4c281cb3e33e6d3ee9537e542bf0a84b83e (10.11.12)
 CVE-2023-52970 (MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through  ...)
 	- mariadb <unfixed> (bug #1100437)
 	[bookworm] - mariadb <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b1e2fff2834e24e6b56557125a9285864db464df

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b1e2fff2834e24e6b56557125a9285864db464df
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250419/90900f48/attachment-0001.htm>