Skip to content
OpenAdvisories
Medium ALAS2023-2026-1811 2 CVEs

Moderate: mariadb1011 security update (Amazon Linux 2023)

Published Jun 8, 2026 · Updated Jun 8, 2026

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-3494: In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (--) or hash (#) style comments, the statement is not logged. CVE-2026-34303: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Fixed packages 29

ReleasePackageFixed in
Amazon Linux · 2023 mariadb1011 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-backup 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-backup-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-client-utils 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-common 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-connect-engine 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-connect-engine-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-cracklib-password-check 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-cracklib-password-check-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-debugsource 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-devel 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-errmsg 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-gssapi-server 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-gssapi-server-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-oqgraph-engine 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-oqgraph-engine-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-pam 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-pam-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-rocksdb-engine 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-rocksdb-engine-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-server 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-server-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-server-utils 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-server-utils-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-sphinx-engine 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-sphinx-engine-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-test 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-test-debuginfo 3:10.11.18-1.amzn2023.0.1

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-34303.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-3494.html