SUSE-SU-2026:2282-1
Security update for mariadb
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for mariadb fixes the following issues: Security fixes: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442). - CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440). - CVE-2026-44171: path traversal in mbstream (bsc#1266439). - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). - CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437). - CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815). - CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814). - CVE-2026-49261: unsafe parameter handling in `wsrep_notify_cmd` (bsc#1267542). Other fixes: - Update to 10.6.27: https://mariadb.com/docs/release-notes/community-server/10.6/10.6.27 https://mariadb.com/docs/release-notes/community-server/changelogs/10.6/10.6.27 - Update to 10.6.26: https://mariadb.com/docs/release-notes/community-server/10.6/10.6.26 https://mariadb.com/docs/release-notes/community-server/changelogs/10.6/10.6.26 https://mariadb.com/docs/release-notes/community-server/10.6/10.6.25 https://mariadb.com/docs/release-notes/community-server/changelogs/10.6/10.6.25
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.4 | libmariadbd-devel, libmariadbd19, mariadb y 3 más | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.5 | libmariadbd-devel, libmariadbd19, mariadb y 3 más | 10.6.27-150400.3.46.1 |
Mostrar las 12 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.4 | libmariadbd-devel | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.4 | libmariadbd19 | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.4 | mariadb | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.4 | mariadb-client | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.4 | mariadb-errormessages | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.4 | mariadb-tools | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.5 | libmariadbd-devel | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.5 | libmariadbd19 | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.5 | mariadb | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.5 | mariadb-client | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.5 | mariadb-errormessages | 10.6.27-150400.3.46.1 |
| SUSE Linux Enterprise 15.5 | mariadb-tools | 10.6.27-150400.3.46.1 |
Referencias
- https://bugzilla.suse.com/1259176
- https://bugzilla.suse.com/1266437
- https://bugzilla.suse.com/1266438
- https://bugzilla.suse.com/1266439
- https://bugzilla.suse.com/1266440
- https://bugzilla.suse.com/1266442
- https://bugzilla.suse.com/1266814
- https://bugzilla.suse.com/1266815
Las 21 referencias
- https://bugzilla.suse.com/1267542
- https://lists.suse.com/pipermail/sle-updates/2026-June/047123.html
- https://www.suse.com/security/cve/CVE-2026-3494/
- https://www.suse.com/security/cve/CVE-2026-44168/
- https://www.suse.com/security/cve/CVE-2026-44170/
- https://www.suse.com/security/cve/CVE-2026-44171/
- https://www.suse.com/security/cve/CVE-2026-44172/
- https://www.suse.com/security/cve/CVE-2026-44173/
- https://www.suse.com/security/cve/CVE-2026-48163/
- https://www.suse.com/security/cve/CVE-2026-48165/
- https://www.suse.com/security/cve/CVE-2026-49261/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-20262282-1/