Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
202

openSUSE 16.0 mariadb-connector-c Important Bug Fix CVE-2026-44172

openSUSE has released a security update for mariadb-connector-c addressing CVE-2026-44172 and includes bug fixes. Users of openSUSE Leap 16.0 can apply the update through recommended installation methods.. openSUSE security update: security update for mariadb-connector-c ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21409-1 Rating: important References: * bsc#1266438 Cross-References: * CVE-2026-44172 CVSS scores: * CVE-2026-44172 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438). Changes for mariadb-connector-c: - Update to release 3.4.9. - Update to release 3.4.8: * Fix compilation with GCC 15 * CONC-762: always set is_null and length in the bind structure to avoid msan errors * CONC-763: add MySQL collation ID 309 (utf8mb4_0900_bin) * CONC-764: fix build of ma_context.c on Android (X18 is a platform-reserved register) * CONC-766: disable clang -Wcast-function-type-strict for makecontext Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1319=1 Package List: - openSUSE Leap 16.0: libmariadb-devel-3.4.9-160000.1.1 libmariadb3-3.4.9-160000.1.1 libmariadb_plugins-3.4.9-160000.1.1 libmariadbprivate-3.4.9-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2026-44172.html . An important update for openSUSE Leap 16.0 addresses CVE-2026-44172 in mariadb-connector-c with a bug fix.. openSUSE Leap 16.0 update,mariadb-connector-c security, CVE-2026-44172 patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 24, 2026 Important OpenSUSE
98

Red Hat 8.1 RHSA-2020-5660-01 Moderate: MariaDB Connector C Security

An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: mariadb-connector-c security, bug fix, and enhancement update Advisory ID: RHSA-2020:5660-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:5660 Issue date: 2020-12-22 CVE Names: CVE-2020-2574 CVE-2020-2752 CVE-2020-2922 CVE-2020-13249 ==================================================================== 1. Summary: An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v. 8.1) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases. The following packages have been upgraded to a later upstream version: mariadb-connector-c (3.1.11). (BZ#1898996) Security Fix(es): * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752) * mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2922) * mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249) * mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574) For more details about the security issue(s), includingthe impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Code utilizing plugins can't be compiled properly (BZ#1899003) * Add "zlib-devel" requirement in "-devel" subpackage (BZ#1899007) * Replace hard-coded /usr with %{_prefix} (BZ#1899101) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1798587 - CVE-2020-2574 mysql: C API unspecified vulnerability (CPU Jan 2020) 1835849 - CVE-2020-2752 mysql: C API unspecified vulnerability (CPU Apr 2020) 1835850 - CVE-2020-2922 mysql: C API unspecified vulnerability (CPU Apr 2020) 1839827 - CVE-2020-13249 mariadb-connector-c: Improper validation of content in a OK packet received from server 1898996 - Tracker: MariaDB Connector C rebase to the latest version (3.1.11) [rhel-8.1.0.z] 1899003 - Code utilizing plugins can´t be compiled properly [rhel-8.1.0.z] 1899101 - Replace hard-coded /usr with %{_prefix} [rhel-8.1.0.z] 6. Package List: Red Hat Enterprise Linux AppStream EUS (v.8.1): Source: mariadb-connector-c-3.1.11-2.el8_1.src.rpm aarch64: mariadb-connector-c-3.1.11-2.el8_1.aarch64.rpm mariadb-connector-c-debuginfo-3.1.11-2.el8_1.aarch64.rpm mariadb-connector-c-debugsource-3.1.11-2.el8_1.aarch64.rpm mariadb-connector-c-devel-3.1.11-2.el8_1.aarch64.rpm mariadb-connector-c-devel-debuginfo-3.1.11-2.el8_1.aarch64.rpm noarch: mariadb-connector-c-config-3.1.11-2.el8_1.noarch.rpm ppc64le: mariadb-connector-c-3.1.11-2.el8_1.ppc64le.rpm mariadb-connector-c-debuginfo-3.1.11-2.el8_1.ppc64le.rpm mariadb-connector-c-debugsource-3.1.11-2.el8_1.ppc64le.rpm mariadb-connector-c-devel-3.1.11-2.el8_1.ppc64le.rpm mariadb-connector-c-devel-debuginfo-3.1.11-2.el8_1.ppc64le.rpm s390x: mariadb-connector-c-3.1.11-2.el8_1.s390x.rpm mariadb-connector-c-debuginfo-3.1.11-2.el8_1.s390x.rpm mariadb-connector-c-debugsource-3.1.11-2.el8_1.s390x.rpm mariadb-connector-c-devel-3.1.11-2.el8_1.s390x.rpm mariadb-connector-c-devel-debuginfo-3.1.11-2.el8_1.s390x.rpm x86_64: mariadb-connector-c-3.1.11-2.el8_1.i686.rpm mariadb-connector-c-3.1.11-2.el8_1.x86_64.rpm mariadb-connector-c-debuginfo-3.1.11-2.el8_1.i686.rpm mariadb-connector-c-debuginfo-3.1.11-2.el8_1.x86_64.rpm mariadb-connector-c-debugsource-3.1.11-2.el8_1.i686.rpm mariadb-connector-c-debugsource-3.1.11-2.el8_1.x86_64.rpm mariadb-connector-c-devel-3.1.11-2.el8_1.i686.rpm mariadb-connector-c-devel-3.1.11-2.el8_1.x86_64.rpm mariadb-connector-c-devel-debuginfo-3.1.11-2.el8_1.i686.rpm mariadb-connector-c-devel-debuginfo-3.1.11-2.el8_1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2020-2574 https://access.redhat.com/security/cve/CVE-2020-2752 https://access.redhat.com/security/cve/CVE-2020-2922 https://access.redhat.com/security/cve/CVE-2020-13249 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . Morecontact details at https://access.redhat.com/security/team/contact Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBX+G5ntzjgjWX9erEAQi2RQ/8CSkiThgAcxhXc3GKGiBVae48Ur9GN4Mo Wrhh0MerPIIS/uDpG+ZcmkbLQvchW3JLcIdorHCNusXPdKK/CIsjO+RMq9iUZ02l ilQ3tVtKFtYsJcnF8EIRAK9w1iVwKaxyHJiyr5zPSvNpJMoGKPVAsFXIuQiSVFnP r8LR+W+DwIU8UW4qQXcREJ1yCvZnkv3per3B0spu1tNnMDQWNqAl4ip/fOiBDhI4 Y/Kn37/ZKoSa7y5QqDdRuE3jmoTPOKYMO1RWux2SVCR/SxbGpC35fX0znrZ1eG85 oCiAy698B/GJltQirbHNqdUD0ok87SgRz5w8VGfYVoGOgHBoOLNr2NKn2lmKeiqE 7UJXi3AglIOeXxl+I655U7MAcOzJyu1BIWO1nXCfHalM61okVIX23sHlBVzFHU/N CDCxymnlu0AEzOdrJWOsBo4/dhHbrMnvfpVjK9HUltxpDxu4TSXTILs32pd6xRys YdI+5ClR/AjMPxf55kk/3+mPt06jD3T95rL7nrxqXZdM7hvB18qFw8ZZQfBKd7H0 JrayplKChoBzfm43OMxjybT3F88cIc3RS2LRfyhWReoxysDc+cn8pUlg9WgYm6tP Etxth2Vj7OY5+bBT+vPH5K1NA2LFhB8tBJWK4FzS1ZovTdlPJjuWdbxRYp5BLIhX 0XRmk7zwv44=KL/0 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Security notice for mariadb-connector-c on Red Hat Enterprise Linux 8.1 regarding urgent patches.. MariaDB Connector, Red Hat EUS, Security Advisory, bug fix, update. . LinuxSecurity.com Team

Calendar%202 Dec 22, 2020 Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200