Threats affecting pkg:rpm/suse/mariadb

This security update for MariaDB addresses multiple vulnerabilities fixed in version 11.8.8. The issues include audit plugin bypass, optimizer vulnerability, authentication plugin crash, unsafe parameter handling in wsrep SST, authorization bypass exposing stored routines, argument injection via unsanitized URLs on Windows, path traversal, incorrect handling of character encoding, missing privilege checks on subqueries, and unsafe parameter handling in wsrep notify commands. These vulnerabilities collectively pose critical risks to database integrity, authorization, and stability.

A security update for MariaDB addresses multiple critical vulnerabilities affecting various components including audit plugin comment handling, wsrep SST parameter handling, argument injection via unsanitized URLs on Windows, path traversal in mbstream, improper handling of character encoding in mysql_real_escape_string(), missing privilege checks for FILE privilege in subqueries, and unsafe parameter handling in wsrep-related features. These issues are fixed in MariaDB version 10.6.27 as released by the SUSE Product Security Team. No known exploits in the wild have been reported at this time.