SUSE-SU-2026:2282-1

This update for mariadb fixes the following issues:

Security fixes:

• CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).
• CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).
• CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).
• CVE-2026-44171: path traversal in mbstream (bsc#1266439).
• CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).
• CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).
• CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).
• CVE-2026-48165: unsafe usage of wsrep_sst_receive_address values on the joiner side (bsc#1266814).
• CVE-2026-49261: unsafe parameter handling in wsrep_notify_cmd (bsc#1267542).

Other fixes:

• Update to 10.6.27: https://mariadb.com/docs/release-notes/community-server/10.6/10.6.27 https://mariadb.com/docs/release-notes/community-server/changelogs/10.6/10.6.27
• Update to 10.6.26: https://mariadb.com/docs/release-notes/community-server/10.6/10.6.26 https://mariadb.com/docs/release-notes/community-server/changelogs/10.6/10.6.26 https://mariadb.com/docs/release-notes/community-server/10.6/10.6.25 https://mariadb.com/docs/release-notes/community-server/changelogs/10.6/10.6.25