The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4491-1 advisory.

    Update to version 10.5.29.

    Release notes and changelog:

    - https://mariadb.com/kb/en/mariadb-10-5-29-release-notes/
    - https://mariadb.com/kb/en/mariadb-10-5-29-changelog/
    - https://mariadb.com/kb/en/mariadb-10-5-28-release-notes/
    - https://mariadb.com/kb/en/mariadb-10-5-28-changelog/

    Security issues fixed:

    - Version 10.5.28:
      * CVE-2025-21490: InnoDB issue allows high privileged attacker with network access to cause a hang or     frequently         repeatable crash of MySQL Server (bsc#1243356).

    - Version 10.5.29:
      * CVE-2025-30693: InnoDB issue allows high privileged attacker with network access to gain unauthorized     update, insert         or delete access to data and cause repeatable crash in MySQL server (bsc#1249213).
      * CVE-2025-30722: mysqldump issue allows low privileged attacker with network access to gain     unauthorized update,         insert or delete access to data in MySQL Client (bsc#1249212).
      * CVE-2023-52969: crash with empty backtrace log in MariaDB Server (bsc#1239150).
      * CVE-2023-52970: crash in MariaDB Server when inserting from derived table containing insert target     table         (bsc#1239151).

    - CVE-2025-13699: lack of proper validation of a user-supplied path prior to using it in file operations     allows an       attacker to execute code in the context of the current user (bsc#1254313).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15: libmariadbd-devel / libmariadbd19 / mariadb / mariadb-client / etc (SUSE-SU-2025:4491-1)

medium Nessus Plugin ID 279455

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Jun 26, 2026, 4:08 PM Plugin metadata Plugin Feed: 202606261608
Version 1.3 May 1, 2026, 7:22 AM IAVM reference Plugin Feed: 202605010722
Version 1.2 Jan 9, 2026, 4:08 PM New Plugin Feed: 202601091608
Version 1.1 Dec 20, 2025, 11:42 AM New Plugin Feed: 202512201142