SUSE-SU-2026:2330-1
Security update for mariadb
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for mariadb fixes the following issues: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413). - CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442). - CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions (bsc#1266441). - CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440). - CVE-2026-44171: path traversal in mbstream (bsc#1266439). - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). - CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437). - CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815). - CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814). - CVE-2026-49261: unsafe parameter handling in `wsrep_notify_cmd` (bsc#1267542). Changes for mariadb: - Update to 11.8.8: https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8 - Update to 11.8.7: https://mariadb.com/docs/release-notes/community-server/11.8/11.8.7 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.7
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.7 | libmariadbd-devel, libmariadbd19, mariadb y 4 más | 11.8.8-150700.3.15.1 |
Mostrar las 7 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.7 | libmariadbd-devel | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | libmariadbd19 | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | mariadb | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | mariadb-client | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | mariadb-errormessages | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | mariadb-galera | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | mariadb-tools | 11.8.8-150700.3.15.1 |
Referencias
- https://bugzilla.suse.com/1259176
- https://bugzilla.suse.com/1261413
- https://bugzilla.suse.com/1266435
- https://bugzilla.suse.com/1266437
- https://bugzilla.suse.com/1266438
- https://bugzilla.suse.com/1266439
- https://bugzilla.suse.com/1266440
- https://bugzilla.suse.com/1266441
Las 27 referencias
- https://bugzilla.suse.com/1266442
- https://bugzilla.suse.com/1266814
- https://bugzilla.suse.com/1266815
- https://bugzilla.suse.com/1267542
- https://lists.suse.com/pipermail/sle-updates/2026-June/047226.html
- https://www.suse.com/security/cve/CVE-2026-34303/
- https://www.suse.com/security/cve/CVE-2026-3494/
- https://www.suse.com/security/cve/CVE-2026-35549/
- https://www.suse.com/security/cve/CVE-2026-44168/
- https://www.suse.com/security/cve/CVE-2026-44169/
- https://www.suse.com/security/cve/CVE-2026-44170/
- https://www.suse.com/security/cve/CVE-2026-44171/
- https://www.suse.com/security/cve/CVE-2026-44172/
- https://www.suse.com/security/cve/CVE-2026-44173/
- https://www.suse.com/security/cve/CVE-2026-48163/
- https://www.suse.com/security/cve/CVE-2026-48165/
- https://www.suse.com/security/cve/CVE-2026-49261/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-20262330-1/