MariaDB: 10.2.44 → 10.3.36
MariaDB · upgrade impact · Official site ↗
Fixed by upgrading to 10.3.36 iVulnerabilities that affect 10.2.44 but no longer affect 10.3.36 — the security gain from this upgrade, by exploited status then exploitation probability.
Exploited first, then by exploitation probability (EPSS).
CVE-2023-5157 HIGH EPSS 1% ✓ cleared in 10.3.36 CVE-2022-27449 HIGH EPSS 0% ✓ cleared in 10.3.36 CVE-2022-27385 HIGH EPSS 0% ✓ cleared in 10.3.36Still open in 10.3.36 iKnown vulnerabilities that affect 10.3.36 too — upgrading to it does not clear these.
These affect 10.3.36 as well — a later release may be needed.
CVE-2022-47015 MEDIUM EPSS 0% → fixed in 10.11.3 CVE-2026-35549 MEDIUM EPSS 0% → fixed in 12.2.2 CVE-2026-3494 MEDIUM EPSS 0% → see advisory