Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3110-1

Опубликовано: 17 июл. 2026
Источник: suse-cvrf

Описание

Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue:

  • CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).

Changes for mariadb-connector-c:

  • Update to 3.1.28.

Список пакетов

Container suse/rmt-server:latest
libmariadb3-3.1.28-150600.18.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libmariadb3-3.1.28-150600.18.3.1
libmariadbprivate-3.1.28-150600.18.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP7
libmariadb-devel-3.1.28-150600.18.3.1
libmariadb_plugins-3.1.28-150600.18.3.1
SUSE Linux Enterprise Server 15 SP6-LTSS
libmariadb-devel-3.1.28-150600.18.3.1
libmariadb3-3.1.28-150600.18.3.1
libmariadb_plugins-3.1.28-150600.18.3.1
libmariadbprivate-3.1.28-150600.18.3.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
libmariadb-devel-3.1.28-150600.18.3.1
libmariadb3-3.1.28-150600.18.3.1
libmariadb_plugins-3.1.28-150600.18.3.1
libmariadbprivate-3.1.28-150600.18.3.1

Ссылки

Описание

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

Затронутые продукты
Container suse/rmt-server:latest:libmariadb3-3.1.28-150600.18.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libmariadb3-3.1.28-150600.18.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libmariadbprivate-3.1.28-150600.18.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP7:libmariadb-devel-3.1.28-150600.18.3.1
Ссылки