SUSE-SU-2026:2284-1
Security update for mariadb
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for mariadb fixes the following issues: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442). - CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440). - CVE-2026-44171: path traversal in mbstream (bsc#1266439). - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). - CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437). - CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815). - CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814). - CVE-2026-49261: unsafe parameter handling in `wsrep_notify_cmd` (bsc#1267542). Changes for mariadb: - Update to 10.11.18: https://mariadb.com/docs/release-notes/community-server/10.11/10.11.18 https://mariadb.com/docs/release-notes/community-server/changelogs/10.11/10.11.18 - Update to 10.11.17: https://mariadb.com/docs/release-notes/community-server/10.11/10.11.17 https://mariadb.com/docs/release-notes/community-server/changelogs/10.11/10.11.17 https://mariadb.com/docs/release-notes/community-server/10.11/10.11.16 https://mariadb.com/docs/release-notes/community-server/changelogs/10.11/10.11.16
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.6 | libmariadbd-devel, libmariadbd19, mariadb y 3 más | 10.11.18-150600.4.20.1 |
Mostrar las 6 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.6 | libmariadbd-devel | 10.11.18-150600.4.20.1 |
| SUSE Linux Enterprise 15.6 | libmariadbd19 | 10.11.18-150600.4.20.1 |
| SUSE Linux Enterprise 15.6 | mariadb | 10.11.18-150600.4.20.1 |
| SUSE Linux Enterprise 15.6 | mariadb-client | 10.11.18-150600.4.20.1 |
| SUSE Linux Enterprise 15.6 | mariadb-errormessages | 10.11.18-150600.4.20.1 |
| SUSE Linux Enterprise 15.6 | mariadb-tools | 10.11.18-150600.4.20.1 |
Referencias
- https://bugzilla.suse.com/1259176
- https://bugzilla.suse.com/1266435
- https://bugzilla.suse.com/1266437
- https://bugzilla.suse.com/1266438
- https://bugzilla.suse.com/1266439
- https://bugzilla.suse.com/1266440
- https://bugzilla.suse.com/1266442
- https://bugzilla.suse.com/1266814
Las 23 referencias
- https://bugzilla.suse.com/1266815
- https://bugzilla.suse.com/1267542
- https://lists.suse.com/pipermail/sle-updates/2026-June/047121.html
- https://www.suse.com/security/cve/CVE-2026-34303/
- https://www.suse.com/security/cve/CVE-2026-3494/
- https://www.suse.com/security/cve/CVE-2026-44168/
- https://www.suse.com/security/cve/CVE-2026-44170/
- https://www.suse.com/security/cve/CVE-2026-44171/
- https://www.suse.com/security/cve/CVE-2026-44172/
- https://www.suse.com/security/cve/CVE-2026-44173/
- https://www.suse.com/security/cve/CVE-2026-48163/
- https://www.suse.com/security/cve/CVE-2026-48165/
- https://www.suse.com/security/cve/CVE-2026-49261/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-20262284-1/