openSUSE-SU-2026:20933-1
Security update for mariadb
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for mariadb fixes the following issues Update to 11.8.8: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413). - CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442). - CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions (bsc#1266441). - CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440). - CVE-2026-44171: path traversal in mbstream (bsc#1266439). - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). - CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437). - CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815). - CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814). - CVE-2026-49261: unsafe parameter handing in `wsrep_notify_cmd` (bsc#1267542). https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 16.0 | libmariadbd-devel, libmariadbd19, mariadb et 7 autres | 11.8.8-160000.1.1 |
Afficher les 10 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 16.0 | libmariadbd-devel | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | libmariadbd19 | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-bench | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-client | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-errormessages | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-galera | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-rpm-macros | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-test | 11.8.8-160000.1.1 |
| openSUSE Leap 16.0 | mariadb-tools | 11.8.8-160000.1.1 |
Références
- https://bugzilla.suse.com/1259176
- https://bugzilla.suse.com/1261413
- https://bugzilla.suse.com/1266435
- https://bugzilla.suse.com/1266437
- https://bugzilla.suse.com/1266438
- https://bugzilla.suse.com/1266439
- https://bugzilla.suse.com/1266440
- https://bugzilla.suse.com/1266441
Les 25 références
- https://bugzilla.suse.com/1266442
- https://bugzilla.suse.com/1266814
- https://bugzilla.suse.com/1266815
- https://bugzilla.suse.com/1267542
- https://www.suse.com/security/cve/CVE-2026-34303/
- https://www.suse.com/security/cve/CVE-2026-3494/
- https://www.suse.com/security/cve/CVE-2026-35549/
- https://www.suse.com/security/cve/CVE-2026-44168/
- https://www.suse.com/security/cve/CVE-2026-44169/
- https://www.suse.com/security/cve/CVE-2026-44170/
- https://www.suse.com/security/cve/CVE-2026-44171/
- https://www.suse.com/security/cve/CVE-2026-44172/
- https://www.suse.com/security/cve/CVE-2026-44173/
- https://www.suse.com/security/cve/CVE-2026-48163/
- https://www.suse.com/security/cve/CVE-2026-48165/
- https://www.suse.com/security/cve/CVE-2026-49261/
- https://www.suse.com/support/security/rating/