1. About CVEs "About CVEs"

2. CVEs fixed in ColumnStore "CVEs fixed in ColumnStore"

About CVEs

CVE® stands for "Common Vulnerabilities and Exposures". It is a publicly available and free-to-use database of known software vulnerabilities maintained at

CVEs fixed in ColumnStore

The appropriate release notes listed document CVEs fixed within a given release. Additional information can also be found at .

There are no known CVEs on ColumnStore-specific infrastructure outside of the MariaDB server at this time.

_{This page is: Copyright © 2025 MariaDB. All rights reserved.}

Overview

Starting with MariaDB Enterprise ColumnStore 6.2.3, ColumnStore supports encryption for user passwords stored in Columnstore.xml:

• Encryption keys are created with the cskeys utility

• Passwords are encrypted using the cspasswd utility

Compatibility

• MariaDB Enterprise ColumnStore 6

• MariaDB Enterprise ColumnStore 22.08

• MariaDB Enterprise ColumnStore 23.02

Encryption Keys

MariaDB Enterprise ColumnStore stores its password encryption keys in the plain-text file /var/lib/columnstore/.secrets.

The encryption keys are not created by default, but can be generated by executing the cskeys utility:

In a multi-node Enterprise ColumnStore cluster, every ColumnStore node should have the same encryption keys. Therefore, it is recommended to execute cskeys on the primary server and then copy /var/lib/columnstore/.secrets to every other ColumnStore node and fix the file's permissions:

Encrypt a Password

To encrypt a password:

Generate an encrypted password using the cspasswd utility:

• If the --interactive command-line option is specified, cspasswd prompts for the password.

Set the encrypted password in Columnstore.xml using the mcsSetConfig utility:

Decrypt a Password

To decrypt a password, execute the cspasswd utility and specify the --decrypt command-line option:

_{This page is: Copyright © 2025 MariaDB. All rights reserved.}