SUSE-SU-2026:2284-1

Kaynağa göre önem derecesi

Hiçbir kaynak CVSS puanı vermiyor.

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.

Açıklama

This update for mariadb fixes the following issues: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442). - CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440). - CVE-2026-44171: path traversal in mbstream (bsc#1266439). - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). - CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437). - CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815). - CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814). - CVE-2026-49261: unsafe parameter handling in `wsrep_notify_cmd` (bsc#1267542). Changes for mariadb: - Update to 10.11.18: https://mariadb.com/docs/release-notes/community-server/10.11/10.11.18 https://mariadb.com/docs/release-notes/community-server/changelogs/10.11/10.11.18 - Update to 10.11.17: https://mariadb.com/docs/release-notes/community-server/10.11/10.11.17 https://mariadb.com/docs/release-notes/community-server/changelogs/10.11/10.11.17 https://mariadb.com/docs/release-notes/community-server/10.11/10.11.16 https://mariadb.com/docs/release-notes/community-server/changelogs/10.11/10.11.16

Etkilenen paketler ve düzeltilmiş sürümler

Referanslar

• https://bugzilla.suse.com/1259176
• https://bugzilla.suse.com/1266435
• https://bugzilla.suse.com/1266437
• https://bugzilla.suse.com/1266438
• https://bugzilla.suse.com/1266439
• https://bugzilla.suse.com/1266440
• https://bugzilla.suse.com/1266442
• https://bugzilla.suse.com/1266814