Several security issues were discovered in MariaDB and this update
includes new upstream MariaDB versions to fix these issues.
MariaDB has been updated to 10.3.37 in Ubuntu 20.04 LTS and to 10.6.11
in Ubuntu 22.04 LTS and Ubuntu 22.10.
In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.
USN-5638-1 fixed a vulnerability in Expat. This update provides
the corresponding updates for Ubuntu 16.04 ESM, Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2022-43680)
This update also fixes a minor regression introduced in
Ubuntu 18.04 LTS.
We apologize for the inconvenience.
Original advisory details:
Rhodri James discovered that Expat incorrectly handled memory when
processing certain malformed XML files. An attacker could possibly
use this issue to cause a crash or execute arbitrary code.
mariadb-10.5-3620221121091939.5e5ad4a0
MariaDB 10.5.18 & Galera 26.4.13
Release notes:
mariadb-10.5-3720221121091939.9e842022
MariaDB 10.5.18 & Galera 26.4.13
Release notes:
mariadb-10.5-3520221121091939.f27b74a8
MariaDB 10.5.18 & Galera 26.4.13
Release notes:
It was discovered that APR-util did not properly handle memory when using
SDBM database files. A local attacker with write access to the database
can make a program or process using these functions crash, and cause a
denial of service.
firefox-107.0-3.fc37
New upstream version (107.0)
firefox-107.0-3.fc35
New upstream version (107.0)
firefox-107.0-3.fc36
New upstream version (107.0)
mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters.
