CVE-2023-52969

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.(CVE-2023-52969)

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.(CVE-2023-52969)

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.(CVE-2023-52969)

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.(CVE-2023-52969)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).(CVE-2024-21096)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2025-21490)

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

• mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

• mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)

• mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)

• mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

• mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Galera is a fast synchronous multimaster wsrep provider (replication engine) for transactional databases and similar applications. For more information about wsrep API see https://github.com/codership/wsrep-API repository. For a description of Galera replication engine see https://www.galeracluster.com web.

Security Fix(es):

• mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

• mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)

• mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)

• mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

• mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

• mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

• mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)

• mariadb: MariaDB Server Crash (CVE-2023-52971)

• mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)

• mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

• mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

• mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

• mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

• mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)

• mariadb: MariaDB Server Crash (CVE-2023-52971)

• mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)

• mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

• mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

• mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

• mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

• mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)

• mariadb: MariaDB Server Crash (CVE-2023-52971)

• mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)

• mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

• mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

• mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

• mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
• mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
• mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
• mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
• mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Galera is a fast synchronous multimaster wsrep provider (replication engine) for transactional databases and similar applications. For more information about wsrep API see https://github.com/codership/wsrep-API repository. For a description of Galera replication engine see https://www.galeracluster.com web.

Security Fix(es):

• mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
• mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
• mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
• mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
• mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

• mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
• mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
• mariadb: MariaDB Server Crash (CVE-2023-52971)
• mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
• mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
• mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
• mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

• mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
• mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
• mariadb: MariaDB Server Crash (CVE-2023-52971)
• mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
• mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
• mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
• mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

• mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
• mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
• mariadb: MariaDB Server Crash (CVE-2023-52971)
• mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
• mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
• mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
• mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

• Updated to the 10.5.29 tarball
• CVE-2025-30722: fix mariadb-dump wrong quoting character by using ' not " and using quote_for_equal()
• CVE-2025-30693: fix incorrect undo logging for indexes on virtual columns by properly encoding/decoding large index IDs in InnoDB undo log records
• CVE-2025-21490: fix assertion failure on cascade by skipping virtual columns in the update vector of the parent table during foreign key cascade operations
• CVE-2023-52969: fix INSERT..SELECT crash when target table appears in a derived table within the SELECT clause
• CVE-2023-52970: fix crash in SHOW GRANTS when user has column-level privileges on a table that has been dropped
• mariadb-mtr.patch: fix MTR port allocation to avoid port conflicts during parallel tests

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2 - CVE-2023-52969. MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where - CVE-2023-52970. MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan - CVE-2023-52971. Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H) - CVE-2025-30693. Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Client accessible data as well as unauthorized update, insert or delete access to some of MySQL Client accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N) - CVE-2025-30722

This update for mariadb fixes the following issues:

Update to version 10.11.14.

Security issues fixed:

• CVE-2025-30693: InnoDB issue allows high privileged attacker with network access to gain unauthorized update, insert or delete access to data and cause repeatable crash in MySQL server (bsc#1249213).
• CVE-2025-30722: mysqldump issue allows low privileged attacker with network access to gain unauthorized update, insert or delete access to data in MySQL Client (bsc#1249212).
• CVE-2023-52969: crash with empty backtrace log in MariaDB Server (bsc#1239150).
• CVE-2023-52970: crash in MariaDB Server when inserting from derived table containing insert target table (bsc#1239151).
• CVE-2023-52971: crash in the optimizer of MariaDB Server when processing certain queries with subqueries (bsc#1249219).

Release notes and changelog:

• https://mariadb.com/docs/release-notes/community-server/mariadb-10-11-series/mariadb-10.11.14-release-notes
• https://mariadb.com/docs/release-notes/community-server/changelogs/changelogs-mariadb-10-11-series/mariadb-10.11.14-changelog
• https://mariadb.com/kb/en/mariadb-10-11-13-release-notes/
• https://mariadb.com/kb/en/mariadb-10-11-13-changelog/
• https://mariadb.com/kb/en/mariadb-10-11-12-release-notes/
• https://mariadb.com/kb/en/mariadb-10-11-12-changelog/

This update for mariadb fixes the following issues:

Update to version 10.6.23.

Security issues fixed:

• CVE-2025-21490: InnoDB issue allows high privileged attacker with network access to cause a hang or frequently repeatable crash of MySQL Server (bsc#1243356).
• CVE-2025-30693: InnoDB issue allows high privileged attacker with network access to gain unauthorized update, insert or delete access to data and cause repeatable crash in MySQL server (bsc#1249213).
• CVE-2025-30722: mysqldump issue allows low privileged attacker with network access to gain unauthorized update, insert or delete access to data in MySQL Client (bsc#1249212).
• CVE-2023-52969: crash with empty backtrace log in MariaDB Server (bsc#1239150).
• CVE-2023-52970: crash in MariaDB Server when inserting from derived table containing insert target table (bsc#1239151).

Release notes and changelog:

• https://mariadb.com/docs/release-notes/community-server/mariadb-10-6-series/mariadb-10.6.23-release-notes
• https://mariadb.com/docs/release-notes/community-server/changelogs/changelogs-mariadb-106-series/mariadb-10.6.23-changelog
• https://mariadb.com/kb/en/mariadb-10-6-22-release-notes/
• https://mariadb.com/kb/en/mariadb-10-6-22-changelog/
• https://mariadb.com/kb/en/mariadb-10-6-21-release-notes/
• https://mariadb.com/kb/en/mariadb-10-6-21-changelog/

This update for mariadb fixes the following issues:

Update to version 10.5.29.

Release notes and changelog:

• https://mariadb.com/kb/en/mariadb-10-5-29-release-notes/
• https://mariadb.com/kb/en/mariadb-10-5-29-changelog/
• https://mariadb.com/kb/en/mariadb-10-5-28-release-notes/
• https://mariadb.com/kb/en/mariadb-10-5-28-changelog/

Security issues fixed:

• Version 10.5.28:

  • CVE-2025-21490: InnoDB issue allows high privileged attacker with network access to cause a hang or frequently repeatable crash of MySQL Server (bsc#1243356).

• Version 10.5.29:

  • CVE-2025-30693: InnoDB issue allows high privileged attacker with network access to gain unauthorized update, insert or delete access to data and cause repeatable crash in MySQL server (bsc#1249213).
  • CVE-2025-30722: mysqldump issue allows low privileged attacker with network access to gain unauthorized update, insert or delete access to data in MySQL Client (bsc#1249212).
  • CVE-2023-52969: crash with empty backtrace log in MariaDB Server (bsc#1239150).
  • CVE-2023-52970: crash in MariaDB Server when inserting from derived table containing insert target table (bsc#1239151).

• CVE-2025-13699: lack of proper validation of a user-supplied path prior to using it in file operations allows an attacker to execute code in the context of the current user (bsc#1254313).

Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.