Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 949336 (CVE-2025-21490) - <dev-db/mariadb-{10.6.21,10.11.11,11.4.5}: High Privilege Denial of Service Vulnerability
Summary: <dev-db/mariadb-{10.6.21,10.11.11,11.4.5}: High Privilege Denial of Service V...
Status: CONFIRMED
Alias: CVE-2025-21490
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL: https://mariadb.com/kb/en/mariadb-10-...
Whiteboard: B2 [stable?]
Keywords:
Depends on:
Blocks:
 
Reported: 2025-02-05 12:58 UTC by Petr Vaněk
Modified: 2025-02-06 16:38 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Petr Vaněk gentoo-dev 2025-02-05 12:58:30 UTC
CVE-2025-21490: A flaw was found in the MySQL Server component: InnoDB. This vulnerability allows a high-privileged attacker to cause a denial of service, which causes frequent crashes or hangs, via multiple network protocols.

https://mariadb.com/kb/en/mariadb-10-6-21-release-notes/#security
https://mariadb.com/kb/en/mariadb-10-11-11-release-notes/#security
https://mariadb.com/kb/en/mariadb-11-4-5-release-notes/#security
Comment 1 Larry the Git Cow gentoo-dev 2025-02-05 16:32:52 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=03754451af01d6f8543811422fe63cb2ff0856a1

commit 03754451af01d6f8543811422fe63cb2ff0856a1
Author:     Petr Vaněk <arkamar@gentoo.org>
AuthorDate: 2025-02-05 13:55:19 +0000
Commit:     Petr Vaněk <arkamar@gentoo.org>
CommitDate: 2025-02-05 16:31:24 +0000

    dev-db/mariadb: add 10.11.11
    
    Bug: https://bugs.gentoo.org/943360
    Bug: https://bugs.gentoo.org/949336
    Signed-off-by: Petr Vaněk <arkamar@gentoo.org>

 dev-db/mariadb/Manifest                |    1 +
 dev-db/mariadb/mariadb-10.11.11.ebuild | 1344 ++++++++++++++++++++++++++++++++
 2 files changed, 1345 insertions(+)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=374eefcae3d0492e99ada86977c871fe731acfe2

commit 374eefcae3d0492e99ada86977c871fe731acfe2
Author:     Petr Vaněk <arkamar@gentoo.org>
AuthorDate: 2025-02-05 13:03:49 +0000
Commit:     Petr Vaněk <arkamar@gentoo.org>
CommitDate: 2025-02-05 16:31:23 +0000

    dev-db/mariadb: add 10.6.21
    
    Bug: https://bugs.gentoo.org/943360
    Bug: https://bugs.gentoo.org/949336
    Signed-off-by: Petr Vaněk <arkamar@gentoo.org>

 dev-db/mariadb/Manifest               |    1 +
 dev-db/mariadb/mariadb-10.6.21.ebuild | 1339 +++++++++++++++++++++++++++++++++
 2 files changed, 1340 insertions(+)
Comment 2 Larry the Git Cow gentoo-dev 2025-02-06 16:37:32 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7cc416c8fad86faca47e93866066fddaa72f6ecc

commit 7cc416c8fad86faca47e93866066fddaa72f6ecc
Author:     Petr Vaněk <arkamar@gentoo.org>
AuthorDate: 2025-02-06 16:06:09 +0000
Commit:     Petr Vaněk <arkamar@gentoo.org>
CommitDate: 2025-02-06 16:35:10 +0000

    dev-db/mariadb: drop 11.4.4
    
    Bug: https://bugs.gentoo.org/949336
    Signed-off-by: Petr Vaněk <arkamar@gentoo.org>

 dev-db/mariadb/Manifest              |    2 -
 dev-db/mariadb/mariadb-11.4.4.ebuild | 1344 ----------------------------------
 2 files changed, 1346 deletions(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2375ab544b799c09f8ff4e8d2f114710c111c41b

commit 2375ab544b799c09f8ff4e8d2f114710c111c41b
Author:     Petr Vaněk <arkamar@gentoo.org>
AuthorDate: 2025-02-05 15:49:23 +0000
Commit:     Petr Vaněk <arkamar@gentoo.org>
CommitDate: 2025-02-06 16:35:08 +0000

    dev-db/mariadb: add 11.4.5
    
    - Patches tarball is extended with a patch which allows us to enable
      test requiring client plugins, main.ssl_autoverify [1] and
      plugins.auth_ed25519.
    - sysschema.v_privileges_by_table_by_level is skipped as it does not
      work correctly in network sandbox, see [2].
    
    [1] https://github.com/gentoo/gentoo/pull/37204#issuecomment-2178492116
    [2] https://jira.mariadb.org/browse/MDEV-36030
    
    Bug: https://bugs.gentoo.org/949336
    Signed-off-by: Petr Vaněk <arkamar@gentoo.org>

 dev-db/mariadb/Manifest              |    2 +
 dev-db/mariadb/mariadb-11.4.5.ebuild | 1344 ++++++++++++++++++++++++++++++++++
 2 files changed, 1346 insertions(+)