PT-2009-6213 · Mariadb+1 · Mariadb104+1

Sergei Golubchik

·

Published

2009-11-30

·

Updated

2024-06-15

·

CVE-2009-4030

CVSS v2.0

4.4

Medium

VectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions mariadb104 (affected versions not specified)
Description The issue concerns security fixes in the mariadb104 package, including the implementation of version 10.4 of MariaDB, which allows for multiple authentication plugins per user account and stores user accounts, passwords, and global privileges in the mysql.global priv table. It also includes support for User Password Expiry, faster privilege checks, and fixes for issues such as MariaDB ignoring the 'open files limit' parameter. Additionally, updates to mysql-systemd-helper and support for lz4 compression in 'INNODB' are included.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2009-4030
DSA-1997-1
OPENSUSE-SU-2024:10153-1
RHSA-2010:0109
RHSA-2010:0110
RHSA-2010_0109
RHSA-2010_0110
SUSE-RU-2023:3956-1
SUSE-RU-2023:4991-1

Affected Products

Red Hat
Mariadb104