openSUSE-SU-2026:20933-1
Security update for mariadb
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for mariadb fixes the following issues Update to 11.8.8: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413). - CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442). - CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions (bsc#1266441). - CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440). - CVE-2026-44171: path traversal in mbstream (bsc#1266439). - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). - CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437). - CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815). - CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814). - CVE-2026-49261: unsafe parameter handing in `wsrep_notify_cmd` (bsc#1267542). https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 16.0 | libmariadbd-devel, libmariadbd19, mariadb y 7 más | 11.8.8-160000.1.1 |
Mostrar las 10 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 16.0 | libmariadbd-devel | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | libmariadbd19 | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-bench | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-client | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-errormessages | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-galera | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-rpm-macros | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-test | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-tools | 11.8.8-160000.1.1 |
Referencias
- https://bugzilla.suse.com/1259176
- https://bugzilla.suse.com/1261413
- https://bugzilla.suse.com/1266435
- https://bugzilla.suse.com/1266437
- https://bugzilla.suse.com/1266438
- https://bugzilla.suse.com/1266439
- https://bugzilla.suse.com/1266440
- https://bugzilla.suse.com/1266441
Las 25 referencias
- https://bugzilla.suse.com/1266442
- https://bugzilla.suse.com/1266814
- https://bugzilla.suse.com/1266815
- https://bugzilla.suse.com/1267542
- https://www.suse.com/security/cve/CVE-2026-34303/
- https://www.suse.com/security/cve/CVE-2026-3494/
- https://www.suse.com/security/cve/CVE-2026-35549/
- https://www.suse.com/security/cve/CVE-2026-44168/
- https://www.suse.com/security/cve/CVE-2026-44169/
- https://www.suse.com/security/cve/CVE-2026-44170/
- https://www.suse.com/security/cve/CVE-2026-44171/
- https://www.suse.com/security/cve/CVE-2026-44172/
- https://www.suse.com/security/cve/CVE-2026-44173/
- https://www.suse.com/security/cve/CVE-2026-48163/
- https://www.suse.com/security/cve/CVE-2026-48165/
- https://www.suse.com/security/cve/CVE-2026-49261/
- https://www.suse.com/support/security/rating/