{"id":"CVE-2026-35549","aliases":["BELL-CVE-2026-35549","BIT-mariadb-2026-35549","BIT-mariadb-min-2026-35549","BIT-mysql-client-2026-35549","DEBIAN-CVE-2026-35549","EUVD-2026-18595","GHSA-3xgj-m9hf-j98g","SUSE-SU-2026:22095-1","SUSE-SU-2026:2330-1","UBUNTU-CVE-2026-35549","openSUSE-SU-2026:10897-1","openSUSE-SU-2026:20933-1"],"status":"published","title":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6,...","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00266,"percentile":0.18873,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-789"],"published":"2026-04-03T05:00:18Z","modified":"2026-10-28T10:49:36Z","fixes":[{"ecosystem":"Alpaquita:25","package":"mariadb","fixed_in":["11.4.10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"mariadb","fixed_in":["11.8.6-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mariadb","fixed_in":["11.4.10","11.8.6","12.2.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mariadb-min","fixed_in":["11.4.10","11.8.6","12.2.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mysql-client","fixed_in":["11.4.10","11.8.6","12.2.2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mariadb","fixed_in":["1:11.8.6-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mariadb","fixed_in":["1:11.8.6-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:25","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.4.5-r0"},{"fixed":"11.4.10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.11.4-r0"},{"fixed":"11.8.6-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mariadb","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"11.4.10"},{"introduced":"11.5.0"},{"fixed":"11.8.6"},{"introduced":"12.0.0"},{"fixed":"12.2.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mariadb-min","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"11.4.10"},{"introduced":"11.5.0"},{"fixed":"11.8.6"},{"introduced":"12.0.0"},{"fixed":"12.2.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mysql-client","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"11.4.10"},{"introduced":"11.5.0"},{"fixed":"11.8.6"},{"introduced":"12.0.0"},{"fixed":"12.2.2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.6-0+deb13u1"}]}],"versions":["1:11.8.2-1","1:11.8.3-0+deb13u1","1:11.8.3-1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-3~exp1","1:11.8.5-3~exp2","1:11.8.5-3~exp3","1:11.8.5-4"]},{"source":"osv","ecosystem":"Debian:14","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.6-1"}]}],"versions":["1:11.8.2-1","1:11.8.3-1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-3~exp1","1:11.8.5-3~exp2","1:11.8.5-3~exp3","1:11.8.5-4"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.8-160000.1.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.8-160000.1.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.8-150700.3.15.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.8-150700.3.15.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mariadb-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.0.20-0ubuntu0.15.04.1","10.0.22-0ubuntu1","10.0.23-1","10.0.23-2","10.0.24-7","10.0.25-0ubuntu0.16.04.1","10.0.27-0ubuntu0.16.04.1","10.0.28-0ubuntu0.16.04.1","10.0.29-0ubuntu0.16.04.1","10.0.31-0ubuntu0.16.04.2","10.0.33-0ubuntu0.16.04.1","10.0.34-0ubuntu0.16.04.1","10.0.36-0ubuntu0.16.04.1","10.0.38-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mariadb-10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.1.25-1","1:10.1.29-6","1:10.1.34-0ubuntu0.18.04.1","1:10.1.38-0ubuntu0.18.04.1","1:10.1.38-0ubuntu0.18.04.2","1:10.1.40-0ubuntu0.18.04.1","1:10.1.41-0ubuntu0.18.04.1","1:10.1.43-0ubuntu0.18.04.1","1:10.1.44-0ubuntu0.18.04.1","1:10.1.47-0ubuntu0.18.04.1","1:10.1.48-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mariadb-10.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.3.17-1","1:10.3.18-1","1:10.3.19-1","1:10.3.21-2","1:10.3.22-1","1:10.3.22-1ubuntu1","1:10.3.25-0ubuntu0.20.04.1","1:10.3.29-0ubuntu0.20.04.1","1:10.3.30-0ubuntu0.20.04.1","1:10.3.31-0ubuntu0.20.04.1","1:10.3.32-0ubuntu0.20.04.1","1:10.3.34-0ubuntu0.20.04.1","1:10.3.37-0ubuntu0.20.04.1","1:10.3.38-0ubuntu0.20.04.1","1:10.3.39-0ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mariadb-10.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.6.7-2ubuntu1","1:10.6.7-2ubuntu1.1","1:10.6.11-0ubuntu0.22.04.1","1:10.6.12-0ubuntu0.22.04.1","1:10.6.16-0ubuntu0.22.04.1","1:10.6.18-0ubuntu0.22.04.1","1:10.6.21-0ubuntu0.22.04.2","1:10.6.22-0ubuntu0.22.04.1","1:10.6.23-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.11.4-1","1:10.11.5-3","1:10.11.6-1","1:10.11.6-2","1:10.11.7-2ubuntu1","1:10.11.7-2ubuntu2","1:10.11.8-0ubuntu0.24.04.1","1:10.11.11-0ubuntu0.24.04.2","1:10.11.13-0ubuntu0.24.04.1","1:10.11.14-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:11.4.5-1","1:11.8.1-4","1:11.8.1-5ubuntu2","1:11.8.2-1ubuntu1","1:11.8.3-1","1:11.8.3-1build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.7-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.8-160000.1.1"}]}],"bundled":12}],"products":[{"vendor":"mariadb","product":"mariadb"}],"references":[{"url":"https://jira.mariadb.org/browse/MDEV-38365","tags":["Issue Tracking","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35549","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-3xgj-m9hf-j98g"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-35549","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/35xxx/CVE-2026-35549.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-35549","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622095-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259176","tags":["report"]},{"url":"https://bugzilla.suse.com/1261413","tags":["report"]},{"url":"https://bugzilla.suse.com/1266435","tags":["report"]},{"url":"https://bugzilla.suse.com/1266437","tags":["report"]},{"url":"https://bugzilla.suse.com/1266438","tags":["report"]},{"url":"https://bugzilla.suse.com/1266439","tags":["report"]},{"url":"https://bugzilla.suse.com/1266440","tags":["report"]},{"url":"https://bugzilla.suse.com/1266441","tags":["report"]},{"url":"https://bugzilla.suse.com/1266442","tags":["report"]},{"url":"https://bugzilla.suse.com/1266814","tags":["report"]},{"url":"https://bugzilla.suse.com/1266815","tags":["report"]},{"url":"https://bugzilla.suse.com/1267542","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49261","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262330-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-35549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-35549","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-35549","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","status":"published","published":"2026-04-03T05:00:18.121Z","modified":"2026-04-03T14:34:04.466Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-789"],"updated_at":"2026-11-02T14:20:05.15083Z"}],"euvd":[{"id":"EUVD-2026-18595","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","status":"published","published":"2026-04-03T05:00:18Z","modified":"2026-04-03T14:34:04Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:25:16.92155Z"}],"ghsa":[{"id":"GHSA-3xgj-m9hf-j98g","title":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6,...","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","status":"published","published":"2026-04-03T06:31:33Z","modified":"2026-04-03T06:31:33Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-789"],"updated_at":"2026-11-02T15:07:08.460272Z"}],"nvd":[{"id":"CVE-2026-35549","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","status":"published","published":"2026-04-03T05:16:23.16Z","modified":"2026-11-06T18:18:14.517Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-789"],"updated_at":"2026-11-06T20:01:11.301896Z"}],"osv":[{"id":"BELL-CVE-2026-35549","status":"published","published":"2026-04-07T06:09:09.368256Z","modified":"2026-04-09T07:20:34.751258Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:23.572955Z"},{"id":"CVE-2026-35549","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","status":"published","published":"2026-04-03T05:00:18.121Z","modified":"2026-11-08T07:11:23.473942247Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-789"],"updated_at":"2026-11-08T02:57:14.556074Z"},{"id":"DEBIAN-CVE-2026-35549","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","status":"published","published":"2026-04-03T05:16:23.16Z","modified":"2026-11-07T09:47:27.346174317Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"UBUNTU-CVE-2026-35549","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","status":"published","published":"2026-04-03T05:16:00Z","modified":"2026-04-22T16:32:08.656864Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:56:16.686388Z"},{"id":"BIT-mariadb-2026-35549","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","status":"published","published":"2026-06-05T05:48:16.659Z","modified":"2026-09-08T08:48:24.047955888Z","updated_at":"2026-11-02T15:28:32.645004Z"},{"id":"BIT-mariadb-min-2026-35549","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","status":"published","published":"2026-06-05T05:48:31.888Z","modified":"2026-09-08T08:48:12.915610297Z","updated_at":"2026-11-02T15:28:32.645004Z"},{"id":"BIT-mysql-client-2026-35549","description":"An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.","status":"published","published":"2026-06-05T05:51:29.789Z","modified":"2026-09-08T08:48:24.295406824Z","updated_at":"2026-11-02T15:28:33.469426Z"},{"id":"openSUSE-SU-2026:10897-1","title":"libmariadbd-devel-11.8.7-1.1 on GA media","description":"These are all security issues fixed in the libmariadbd-devel-11.8.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-29T00:00:00Z","modified":"2026-05-30T23:15:07.808820708Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:20933-1","title":"Security update for mariadb","description":"This update for mariadb fixes the following issues\n\nUpdate to 11.8.8:\n\n- CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).\n- CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).\n- CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413).\n- CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).\n- CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions\n  (bsc#1266441).\n- CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).\n- CVE-2026-44171: path traversal in mbstream (bsc#1266439).\n- CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).\n- CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).\n- CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).\n- CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814).\n- CVE-2026-49261: unsafe parameter handing in `wsrep_notify_cmd` (bsc#1267542).\n\n https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8\n https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8\n","status":"published","published":"2026-06-10T10:57:17Z","modified":"2026-06-13T18:24:18.776064673Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22095-1","title":"Security update for mariadb","description":"This update for mariadb fixes the following issues\n\nUpdate to 11.8.8:\n\n- CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).\n- CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).\n- CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413).\n- CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).\n- CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions\n  (bsc#1266441).\n- CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).\n- CVE-2026-44171: path traversal in mbstream (bsc#1266439).\n- CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).\n- CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).\n- CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).\n- CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814).\n- CVE-2026-49261: unsafe parameter handing in `wsrep_notify_cmd` (bsc#1267542).\n\n https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8\n https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8\n","status":"published","published":"2026-06-10T09:53:24Z","modified":"2026-06-16T18:24:40.652960657Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2330-1","title":"Security update for mariadb","description":"This update for mariadb fixes the following issues:\n\n- CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).\n- CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).\n- CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413).\n- CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).\n- CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions\n  (bsc#1266441).\n- CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).\n- CVE-2026-44171: path traversal in mbstream (bsc#1266439).\n- CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).\n- CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).\n- CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).\n- CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814).\n- CVE-2026-49261: unsafe parameter handling in `wsrep_notify_cmd` (bsc#1267542).\n\nChanges for mariadb:\n\n- Update to 11.8.8:\n https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8\n https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8\n- Update to 11.8.7:\n https://mariadb.com/docs/release-notes/community-server/11.8/11.8.7\n https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.7\n","status":"published","published":"2026-06-10T07:39:58Z","modified":"2026-06-10T16:15:23.544956092Z","updated_at":"2026-11-02T15:54:03.503431Z"}]}}