Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: Update to 3.1.28. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3135-1 Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: - Update to 3.1.28...

Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: Update to 3.1.28. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3134-1 Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: - Update to 3.1.28...

ROOT-OS-DEBIAN-13-CVE-2026-44173 CVE-2026-44173 in rootio-mariadb - Patched by Root

Root has patched CVE-2026-44173 in the rootio-mariadb package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-44171 CVE-2026-44171 in rootio-mariadb - Patched by Root

Root has patched CVE-2026-44171 in the rootio-mariadb package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-44169 CVE-2026-44169 in rootio-mariadb - Patched by Root

Root has patched CVE-2026-44169 in the rootio-mariadb package for Root:Debian:13. Multiple fixed versions available...

TencentOS Server 3: mariadb:10.11 (TSSA-2026:0658)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0658 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

SUSE SLED15: libmariadb-devel / libmariadb3 / libmariadb_plugins / etc (SUSE-SU-2026:3110-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3110-1 advisory. This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly...

Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: Update to 3.1.28. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3110-1 Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: - Update to 3.1.28...

mariadb10.11 security, bug fix, and enhancement update

3:10.11.18-1 - Rebase to 10.11.18 3:10.11.17-1 - Rebase to 10.11.17 3:10.11.16-1 - Rebase to 10.11.16...

CVE-2026-50147

Metabase is an open-source business intelligence and embedded analytics tool. From 1.57.0 until 1.57.19.1, 1.58.14.1, 1.59.10, and 1.60.4, an attacker who can configure a Metabase database connection can read arbitrary files from the Metabase server's filesystem by adding unsafe JDBC parameters t...

EUVD-2026-44603

A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API GET /api/v1/clients in versions up to and including 1.14.0. The orderBy and sortOrder request parameters are concatenated into a SQL query without sufficient validation, allowing an authenticated user with...

Ubuntu 26.04 LTS : MariaDB vulnerabilities (USN-8536-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8536-1 advisory. It was discovered that MariaDB did not properly validate parameters supplied by a joiner node during a State Snapshot Transfer using the mariabackup...

CVE-2026-55405

LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys, and in MariaDB string values, directly int...

CVE-2026-55405

LangChain4j contains a SQL injection vulnerability in the embedding stores for MariaDB and pgvector. Prior to versions 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, metadata filter keys (and, for MariaDB, some string values) are concatenated directly into SQL in EmbeddingSearchRequ...

CVE-2026-55405 LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector

LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys, and in MariaDB string values, directly int...

CVE-2026-55405 LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector

LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys, and in MariaDB string values, directly int...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: portieris, kube-fluentd-operator, vault-k8s, supercronic, sftpgo-plugin-auth, kapp-controller, terragrunt, delve, kuberlr, ferretdb, secrets-store-csi-driver-provider-gcp, knative-client, victoriametrics-cluster, vexctl, azurefile-csi, sops, nri-discovery-kubernetes,...