SUSE-SU-2026:22095-1
Security update for mariadb
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for mariadb fixes the following issues Update to 11.8.8: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413). - CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442). - CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions (bsc#1266441). - CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440). - CVE-2026-44171: path traversal in mbstream (bsc#1266439). - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). - CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437). - CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815). - CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814). - CVE-2026-49261: unsafe parameter handing in `wsrep_notify_cmd` (bsc#1267542). https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 16.0 | libmariadbd-devel, libmariadbd19, mariadb y 4 más | 11.8.8-160000.1.1 |
Mostrar las 7 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 16.0 | libmariadbd-devel | 11.8.8-160000.1.1 |
| SUSE Linux Enterprise 16.0 | libmariadbd19 | 11.8.8-160000.1.1 |
| SUSE Linux Enterprise 16.0 | mariadb | 11.8.8-160000.1.1 |
| SUSE Linux Enterprise 16.0 | mariadb-bench | 11.8.8-160000.1.1 |
| SUSE Linux Enterprise 16.0 | mariadb-client | 11.8.8-160000.1.1 |
| SUSE Linux Enterprise 16.0 | mariadb-errormessages | 11.8.8-160000.1.1 |
| SUSE Linux Enterprise 16.0 | mariadb-tools | 11.8.8-160000.1.1 |
Referencias
- https://bugzilla.suse.com/1259176
- https://bugzilla.suse.com/1261413
- https://bugzilla.suse.com/1266435
- https://bugzilla.suse.com/1266437
- https://bugzilla.suse.com/1266438
- https://bugzilla.suse.com/1266439
- https://bugzilla.suse.com/1266440
- https://bugzilla.suse.com/1266441
Las 27 referencias
- https://bugzilla.suse.com/1266442
- https://bugzilla.suse.com/1266814
- https://bugzilla.suse.com/1266815
- https://bugzilla.suse.com/1267542
- https://lists.suse.com/pipermail/sle-updates/2026-June/047302.html
- https://www.suse.com/security/cve/CVE-2026-34303/
- https://www.suse.com/security/cve/CVE-2026-3494/
- https://www.suse.com/security/cve/CVE-2026-35549/
- https://www.suse.com/security/cve/CVE-2026-44168/
- https://www.suse.com/security/cve/CVE-2026-44169/
- https://www.suse.com/security/cve/CVE-2026-44170/
- https://www.suse.com/security/cve/CVE-2026-44171/
- https://www.suse.com/security/cve/CVE-2026-44172/
- https://www.suse.com/security/cve/CVE-2026-44173/
- https://www.suse.com/security/cve/CVE-2026-48163/
- https://www.suse.com/security/cve/CVE-2026-48165/
- https://www.suse.com/security/cve/CVE-2026-49261/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-202622095-1/