Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3134-1

Опубликовано: 20 июл. 2026
Источник: suse-cvrf

Описание

Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue:

  • CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).

Changes for mariadb-connector-c:

  • Update to 3.1.28.

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise Server 15 SP4-LTSS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise Server 15 SP5-LTSS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1

Описание

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.


Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmariadb-devel-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmariadb3-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmariadb_plugins-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmariadbprivate-3.1.28-150000.3.39.1

Ссылки