ELA-1265-1 mariadb-10.1 security update

Denial-of-service

2024-12-01
Packagemariadb-10.1
Version10.1.48-0+deb9u6 (stretch)
Related CVEs CVE-2022-38791


A Denial-of-service vulnerability was found in MariaDB, a popular database server. It was found that the mariabackup tool did not correctly handle a mutex primitive, making it possible for local users to trigger a deadlock.



For Debian 9 stretch, these problems have been fixed in version 10.1.48-0+deb9u6.

We recommend that you upgrade your mariadb-10.1 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.