Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3135-1

Опубликовано: 20 июл. 2026
Источник: suse-cvrf

Описание

Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue:

  • CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).

Changes for mariadb-connector-c:

  • Update to 3.1.28.

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
libmariadb-devel-3.1.28-2.38.1
libmariadb3-3.1.28-2.38.1
libmariadb_plugins-3.1.28-2.38.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libmariadb-devel-3.1.28-2.38.1
libmariadb3-3.1.28-2.38.1
libmariadb_plugins-3.1.28-2.38.1

Ссылки

Описание

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:libmariadb-devel-3.1.28-2.38.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libmariadb3-3.1.28-2.38.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libmariadb_plugins-3.1.28-2.38.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libmariadb-devel-3.1.28-2.38.1
Ссылки
Уязвимость SUSE-SU-2026:3135-1