Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

openSUSE 15.6 mariadb Critical Exploit Fix SUSE-SU-2026-2284-1

opensuse
Calendar Grey June 5, 2026
Dist Opensuse Esm H88
# Security update for mariadb Announcement ID: SUSE-SU-2026:2284-1 Release Date: 2026-06-05T12:16:05
An update that solves 10 vulnerabilities can now be installed.

Description

This update for mariadb fixes the following issues:

* CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).

* CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).

* CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side

(bsc#1266442).

* CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via

unsanitized URL (bsc#1266440).

* CVE-2026-44171: path traversal in mbstream (bsc#1266439).

* CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5

(bsc#1266438).

* CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM

clause (bsc#1266437).

* CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side

(bsc#1266815).

* CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the

joiner side (bsc#1266814).

* CVE-2026-49261: unsafe parameter handling in `wsrep_notify_cmd`

(bsc#1267542).

Changes for mariadb:

* Update to 10.11.18:...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical patch attack OpenSUSE MariaDB

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* Galera for Ericsson 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-ERICSSON-2026-2284=1

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2284=1

* openSUSE Leap 15.6

zypper in -t patch SUSE-2026-2284=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2284=1

Package List

* Galera for Ericsson 15 SP6 (x86_64)

* mariadb-debugsource-10.11.18-150600.4.20.1

* mariadb-debuginfo-10.11.18-150600.4.20.1

* mariadb-galera-10.11.18-150600.4.20.1

* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)

* mariadb-debugsource-10.11.18-150600.4.20.1

* mariadb-tools-10.11.18-150600.4.20.1

* libmariadbd19-10.11.18-150600.4.20.1

* mariadb-10.11.18-150600.4.20.1

* libmariadbd19-debuginfo-10.11.18-150600.4.20.1

* mariadb-client-10.11.18-150600.4.20.1

* mariadb-client-debuginfo-10.11.18-150600.4.20.1

* mariadb-tools-debuginfo-10.11.18-150600.4.20.1

* libmariadbd-devel-10.11.18-150600.4.20.1

* mariadb-debuginfo-10.11.18-150600.4.20.1

* SUSE Linux Enterprise Server 15 SP6 LTSS (noarch)

* mariadb-errormessages-10.11.18-150600.4.20.1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)

* mariadb-debugsource-10.11.18-150600.4.20.1

* mariadb-rpm-macros-10.11.18-150600.4.20.1

* mariadb-test-10.11.18-150600.4.20.1

* mariadb-tools-10.11.18-150600.4.20.1

*...

Read the Full Advisory

References

* bsc#1259176

* bsc#1266435

* bsc#1266437

* bsc#1266438

* bsc#1266439

* bsc#1266440

* bsc#1266442

* bsc#1266814

* bsc#1266815

* bsc#1267542

## References:

* https://www.suse.com/security/cve/CVE-2026-34303.html

* https://www.suse.com/security/cve/CVE-2026-3494.html

* https://www.suse.com/security/cve/CVE-2026-44168.html

* https://www.suse.com/security/cve/CVE-2026-44170.html

* https://www.suse.com/security/cve/CVE-2026-44171.html

* https://www.suse.com/security/cve/CVE-2026-44172.html

* https://www.suse.com/security/cve/CVE-2026-44173.html

* https://www.suse.com/security/cve/CVE-2026-48163.html

* https://www.suse.com/security/cve/CVE-2026-48165.html

* https://www.suse.com/security/cve/CVE-2026-49261.html

* https://bugzilla.suse.com/show_bug.cgi?id=1259176

* https://bugzilla.suse.com/show_bug.cgi?id=1266435

* https://bugzilla.suse.com/show_bug.cgi?id=1266437

* https://bugzilla.suse.com/show_bug.cgi?id=1266438

* https://bugzilla.suse.com/show_bug.cgi?id=1266439

* https://bugzilla.suse.com/show_bug.cgi?id=1266440

*...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:2284-1
Release Date: 2026-06-05T12:16:05Z
Affected Products: * Galera for Ericsson 15 SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6

Topics%20covered

Topics Covered

security advisory critical patch attack OpenSUSE MariaDB

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here