[Git][security-tracker-team/security-tracker][master] CVE-2023-52969/mariaDB

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f8a2f9cc by Bastien Roucariès at 2025-05-05T22:43:16+02:00
CVE-2023-52969/mariaDB

Same fix then  CVE-2023-52970

See comment: https://jira.mariadb.org/browse/MDEV-32083?focusedCommentId=304291&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-304291

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18980,7 +18980,9 @@ CVE-2023-52969 (MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 th
 	- mariadb <unfixed> (bug #1100437)
 	[bookworm] - mariadb <no-dsa> (Minor issue)
 	- mariadb-10.5 <removed>
-	NOTE: https://jira.mariadb.org/browse/MDEV-32083 (not public)
+	NOTE: https://jira.mariadb.org/browse/MDEV-32083
+	NOTE: Fixed in MariaDB: 10.5.29, 10.6.22, 10.11.12, 11.4.6, 11.8.2
+	NOTE: Fixed by fix of MDEV-32086/CVE-2023-52970
 CVE-2023-52968 (MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 1 ...)
 	- mariadb <not-affected> (Fixed before initial upload to Debian after source package rename)
 	- mariadb-10.5 <removed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8a2f9cc49582ccef5aa078cab921a4ff163ff3c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8a2f9cc49582ccef5aa078cab921a4ff163ff3c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250505/dbd0344c/attachment.htm>