Critical Security Update for mariadb-connector-c: CVE-2026-44172
Summary
RHSA-2026:83519: Red Hat Security Advisory: mariadb-connector-c security update. Affects mariadb-connector-c versions < 0:3.2.6-1.el9_6.1. Fixed in 0:3.2.6-1.el9_6.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mariadb-connector-c is a widely used C client library for MariaDB, providing a simple interface for applications to connect to MariaDB databases. It is essential for developers who require efficient database connectivity and supports various features such as prepared statements and transactions. However, recent security assessments have revealed a vulnerability that could potentially compromise the integrity and confidentiality of data handled by applications utilizing this library.
Vulnerability Detail
The vulnerability identified as CVE-2026-44172 affects mariadb-connector-c versions prior to 3.2.6-1.el9_6.1. This flaw arises from improper handling of certain inputs, which could allow an attacker to exploit the library and execute arbitrary code or cause a denial of service. The ramifications of this vulnerability are severe, as it could lead to unauthorized access to sensitive data or disruption of services relying on the affected library.
How To Fix
Minimum fixed version
0:3.2.6-1.el9_6.1
This is the first release that contains the fix.
sudo dnf update mariadb-connector-cTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, if immediate patching is not feasible, consider restricting access to the affected application or implementing network-level controls to limit exposure until the update can be applied.
Conclusion
The mariadb-connector-c library has a critical vulnerability (CVE-2026-44172) that requires immediate attention. Updating to the latest version is essential to protect applications from potential exploits. Utilize tools like Vulert to monitor for vulnerabilities and ensure your software remains secure.
See every vulnerability recorded for mariadb-connector-c →
FAQ
CVE-2026-44172 is a security vulnerability in the mariadb-connector-c library that could allow attackers to execute arbitrary code or cause denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Failure to address this vulnerability could lead to unauthorized access to sensitive data and potential service disruptions.
Yes, you should upgrade to version 3.2.6-1.el9_6.1 or later to mitigate the vulnerability.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in software using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for mariadb-connector-c.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.