SUSE-SU-2026:2330-1
Security update for mariadb
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for mariadb fixes the following issues: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413). - CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442). - CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions (bsc#1266441). - CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440). - CVE-2026-44171: path traversal in mbstream (bsc#1266439). - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). - CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437). - CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815). - CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814). - CVE-2026-49261: unsafe parameter handling in `wsrep_notify_cmd` (bsc#1267542). Changes for mariadb: - Update to 11.8.8: https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8 - Update to 11.8.7: https://mariadb.com/docs/release-notes/community-server/11.8/11.8.7 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.7
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 15.7 | libmariadbd-devel, libmariadbd19, mariadb ve 4 tane daha | 11.8.8-150700.3.15.1 |
1 kaynaktaki 7 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 15.7 | libmariadbd-devel | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | libmariadbd19 | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | mariadb | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | mariadb-client | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | mariadb-errormessages | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | mariadb-galera | 11.8.8-150700.3.15.1 |
| SUSE Linux Enterprise 15.7 | mariadb-tools | 11.8.8-150700.3.15.1 |
Referanslar
- https://bugzilla.suse.com/1259176
- https://bugzilla.suse.com/1261413
- https://bugzilla.suse.com/1266435
- https://bugzilla.suse.com/1266437
- https://bugzilla.suse.com/1266438
- https://bugzilla.suse.com/1266439
- https://bugzilla.suse.com/1266440
- https://bugzilla.suse.com/1266441
27 referansın hepsi
- https://bugzilla.suse.com/1266442
- https://bugzilla.suse.com/1266814
- https://bugzilla.suse.com/1266815
- https://bugzilla.suse.com/1267542
- https://lists.suse.com/pipermail/sle-updates/2026-June/047226.html
- https://www.suse.com/security/cve/CVE-2026-34303/
- https://www.suse.com/security/cve/CVE-2026-3494/
- https://www.suse.com/security/cve/CVE-2026-35549/
- https://www.suse.com/security/cve/CVE-2026-44168/
- https://www.suse.com/security/cve/CVE-2026-44169/
- https://www.suse.com/security/cve/CVE-2026-44170/
- https://www.suse.com/security/cve/CVE-2026-44171/
- https://www.suse.com/security/cve/CVE-2026-44172/
- https://www.suse.com/security/cve/CVE-2026-44173/
- https://www.suse.com/security/cve/CVE-2026-48163/
- https://www.suse.com/security/cve/CVE-2026-48165/
- https://www.suse.com/security/cve/CVE-2026-49261/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-20262330-1/