Critical Vulnerabilities in MariaDB Affecting openSUSE and SUSE Linux Enterprise Server

Two critical advisories were issued for MariaDB affecting openSUSE and SUSE Linux Enterprise Server. The vulnerabilities include CVE-2026-3494, an audit plugin handling bypass, and CVE-2026-34303, an unspecified optimizer vulnerability. Other notable issues include unsafe parameter handling and path traversal vulnerabilities. The updates address multiple CVEs, including CVE-2026-44168, CVE-2026-44170, CVE-2026-44171, CVE-2026-44172, and CVE-2026-44173. The updates were released on June 5, 2026, and are rated critical. Affected systems include MariaDB installations on both platforms. Administrators are urged to apply the patches immediately to mitigate potential exploitation risks.

Key Points: • Critical vulnerabilities in MariaDB affect both openSUSE and SUSE Linux Enterprise Server. • Key CVEs include CVE-2026-3494 and CVE-2026-34303, with multiple other vulnerabilities addressed. • Patches were released on June 5, 2026, and are rated critical, requiring immediate application.