USN-4944-1

Source
https://ubuntu.com/security/notices/USN-4944-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4944-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-4944-1
Published
2021-05-11T18:30:29Z
Modified
2026-04-22T10:15:02Z
Summary
mariadb-10.1, mariadb-10.3, mariadb-10.5 vulnerabilities
Details

This update fixed multiple vulnerabilities in MariaDB.

Ubuntu 18.04 LTS has been updated to MariaDB 10.1.48. Ubuntu 20.04 LTS has been updated to MariaDB 10.3.29. Ubuntu 20.10 has been updated to MariaDB 10.3.29. Ubuntu 21.04 has been updated to MariaDB 10.5.10.

References

Affected packages

Ubuntu:18.04:LTS / mariadb-10.1

Package

Name
mariadb-10.1
Purl
pkg:deb/ubuntu/mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:10.1.48-0ubuntu0.18.04.1

Affected versions

10.*
10.1.25-1
1:10.*
1:10.1.29-6
1:10.1.34-0ubuntu0.18.04.1
1:10.1.38-0ubuntu0.18.04.1
1:10.1.38-0ubuntu0.18.04.2
1:10.1.40-0ubuntu0.18.04.1
1:10.1.41-0ubuntu0.18.04.1
1:10.1.43-0ubuntu0.18.04.1
1:10.1.44-0ubuntu0.18.04.1
1:10.1.47-0ubuntu0.18.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "libmariadbclient-dev-compat",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libmariadbclient18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libmariadbd18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-client-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-client-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-server-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-server-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
        }
    ]
}

Database specific

cves_map
{
    "cves": [],
    "ecosystem": "Ubuntu:18.04:LTS"
}
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4944-1.json"

Ubuntu:20.04:LTS / mariadb-10.3

Package

Name
mariadb-10.3
Purl
pkg:deb/ubuntu/mariadb-10.3@1:10.3.29-0ubuntu0.20.04.1?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:10.3.29-0ubuntu0.20.04.1

Affected versions

1:10.*
1:10.3.17-1
1:10.3.18-1
1:10.3.19-1
1:10.3.21-2
1:10.3.22-1
1:10.3.22-1ubuntu1
1:10.3.25-0ubuntu0.20.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.29-0ubuntu0.20.04.1"
        }
    ]
}

Database specific

cves_map
{
    "cves": [],
    "ecosystem": "Ubuntu:20.04:LTS"
}
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4944-1.json"