Описание
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issue:
- CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).
Changes for mariadb-connector-c:
- Update to 3.1.28.
Список пакетов
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise Server 15 SP4-LTSS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise Server 15 SP5-LTSS
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
libmariadb-devel-3.1.28-150000.3.39.1
libmariadb3-3.1.28-150000.3.39.1
libmariadb_plugins-3.1.28-150000.3.39.1
libmariadbprivate-3.1.28-150000.3.39.1
Ссылки
- Link for SUSE-SU-2026:3134-1
- E-Mail link for SUSE-SU-2026:3134-1
- SUSE Security Ratings
- SUSE Bug 1266438
- SUSE CVE CVE-2026-44172 page
Описание
MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.
Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmariadb-devel-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmariadb3-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmariadb_plugins-3.1.28-150000.3.39.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libmariadbprivate-3.1.28-150000.3.39.1
Ссылки
- CVE-2026-44172
- SUSE Bug 1266438