Debian 10435 Published by

Debian GNU/Linux has been updated with two important security updates: MariaDB 10.5 for Debian 11 LTS and Chromium for Debian 12

[DLA 4154-1] mariadb-10.5 security update
[DSA 5916-1] chromium security update




[SECURITY] [DLA 4154-1] mariadb-10.5 security update


- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4154-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Bastien Roucari??s
May 07, 2025 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package : mariadb-10.5
Version : 1:10.5.28-0+deb11u2
CVE ID : CVE-2023-52969 CVE-2023-52970

MariaDB a popular database engine was affected by
two vulnerabilties.

CVE-2023-52969

MariaDB crashed with an empty backtrace log.

CVE-2023-52970

MariaDB crashed in function
Item_direct_view_ref::derived_field_transformer_for_where.

For Debian 11 bullseye, these problems have been fixed in version
1:10.5.28-0+deb11u2.

We recommend that you upgrade your mariadb-10.5 packages.

For the detailed security status of mariadb-10.5 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/mariadb-10.5

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



[SECURITY] [DSA 5916-1] chromium security update


- -------------------------------------------------------------------------
Debian Security Advisory DSA-5916-1 security@debian.org
https://www.debian.org/security/ Andres Salomon
May 07, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : chromium
CVE ID : CVE-2025-4372

Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.

For the stable distribution (bookworm), this problem has been fixed in
version 136.0.7103.92-1~deb12u1.

We recommend that you upgrade your chromium packages.

For the detailed security status of chromium please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/chromium

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/