Summary
The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases.
Security Fix(es):
* mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | mariadb-connector-c | 3.4.4-2.el10_2 |
| AlmaLinux · 10 | mariadb-connector-c-config | 3.4.4-2.el10_2 |
| AlmaLinux · 10 | mariadb-connector-c-devel | 3.4.4-2.el10_2 |
| AlmaLinux · 10 | mariadb-connector-c-doc | 3.4.4-2.el10_2 |
| AlmaLinux · 10 | mariadb-connector-c-test | 3.4.4-2.el10_2 |
Vulnerabilities 1
-
Medium 6.9
MariaDB: mysql_real_escape_string() incorrectly handled big5
MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 charac…