{"schemaVersion":3,"id":"USN-6600-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"mariadb, mariadb-10.3, mariadb-10.6 vulnerabilities\n\nSeveral security issues were discovered in MariaDB and this update\nincludes new upstream MariaDB versions to fix these issues.\n\nMariaDB has been updated to 10.3.39 in Ubuntu 20.04 LTS, 10.6.16\nin Ubuntu 22.04 LTS and 10.11.6 in Ubuntu 23.10.\n\nCVE-2022-47015 only affected the MariaDB packages in Ubuntu 20.04 LTS\nand Ubuntu 22.04 LTS.\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.","dates":{"published":"2024-01-25T18:32:58.000Z","modified":"2026-04-27T17:17:22.642Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"mariadb-10.3","name":"mariadb-10.3","label":"mariadb-10.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mariadb-10.3","purlType":"deb","versions":[{"text":"< 1:10.3.39-0ubuntu0.20.04.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:10.3.39-0ubuntu0.20.04.2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"mariadb-10.6","name":"mariadb-10.6","label":"mariadb-10.6","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mariadb-10.6","purlType":"deb","versions":[{"text":"< 1:10.6.16-0ubuntu0.22.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:10.6.16-0ubuntu0.22.04.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-6600-1","label":"ubuntu.com/security/notices/USN-6600-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-47015","label":"ubuntu.com/security/CVE-2022-47015","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2023-22084","label":"ubuntu.com/security/CVE-2023-22084","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2022-47015","CVE-2023-22084"],"downstream":[],"duplicates":[],"related":["CVE-2022-47015","CVE-2023-22084"]},"timeline":[{"kind":"published","date":"2024-01-25T18:32:58.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-27T17:17:22.642Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T03:37:40.868Z","stale":false,"partial":false}}