Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21409-1

Опубликовано: 22 июл. 2026
Источник: suse-cvrf

Описание

Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue:

  • CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).

Changes for mariadb-connector-c:

  • Update to release 3.4.9.

  • Update to release 3.4.8:

  • Fix compilation with GCC 15
  • CONC-762: always set is_null and length in the bind structure to avoid msan errors
  • CONC-763: add MySQL collation ID 309 (utf8mb4_0900_bin)
  • CONC-764: fix build of ma_context.c on Android (X18 is a platform-reserved register)
  • CONC-766: disable clang -Wcast-function-type-strict for makecontext

Список пакетов

openSUSE Leap 16.0
libmariadb-devel-3.4.9-160000.1.1
libmariadb3-3.4.9-160000.1.1
libmariadb_plugins-3.4.9-160000.1.1
libmariadbprivate-3.4.9-160000.1.1

Ссылки

Описание

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

Затронутые продукты
openSUSE Leap 16.0:libmariadb-devel-3.4.9-160000.1.1
openSUSE Leap 16.0:libmariadb3-3.4.9-160000.1.1
openSUSE Leap 16.0:libmariadb_plugins-3.4.9-160000.1.1
openSUSE Leap 16.0:libmariadbprivate-3.4.9-160000.1.1
Ссылки