This update for mariadb fixes the following issues:
Update to version 10.11.11.
* CVE-2025-21490: vulnerability allows high privileged attacker with network
access to cause hangs and frequent crashes on affected servers
(bsc#1243356).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch SUSE-2025-1716=1 openSUSE-SLE-15.6-2025-1716=1
* SUSE Package Hub 15 15-SP6
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-1716=1
* Server Applications Module 15-SP6
zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-1716=1
* Galera for Ericsson 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-ERICSSON-2025-1716=1
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)
* mariadb-rpm-macros-10.11.11-150600.4.10.1
* libmariadbd19-debuginfo-10.11.11-150600.4.10.1
* mariadb-debugsource-10.11.11-150600.4.10.1
* mariadb-galera-10.11.11-150600.4.10.1
* mariadb-client-debuginfo-10.11.11-150600.4.10.1
* mariadb-test-10.11.11-150600.4.10.1
* mariadb-client-10.11.11-150600.4.10.1
* mariadb-debuginfo-10.11.11-150600.4.10.1
* mariadb-10.11.11-150600.4.10.1
* mariadb-bench-debuginfo-10.11.11-150600.4.10.1
* mariadb-test-debuginfo-10.11.11-150600.4.10.1
* libmariadbd19-10.11.11-150600.4.10.1
* libmariadbd-devel-10.11.11-150600.4.10.1
* mariadb-tools-10.11.11-150600.4.10.1
* mariadb-bench-10.11.11-150600.4.10.1
* mariadb-tools-debuginfo-10.11.11-150600.4.10.1
* openSUSE Leap 15.6 (noarch)
* mariadb-errormessages-10.11.11-150600.4.10.1
* SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64)
* mariadb-debuginfo-10.11.11-150600.4.10.1
* mariadb-debugsource-10.11.11-150600.4.10.1
* mariadb-galera-10.11.11-150600.4.10.1
* Server...
Read the Full Advisory* bsc#1243356
## References:
* https://www.suse.com/security/cve/CVE-2025-21490.html
* https://bugzilla.suse.com/show_bug.cgi?id=1243356
Get the latest Linux and open source security news straight to your inbox.