Skip to content
OpenAdvisories
High ALAS2023-2026-1844 6 CVEs

Important: mariadb1011 security update (Amazon Linux 2023)

Published Jun 22, 2026 · Updated Jun 22, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-44173: MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. CVE-2026-44172: An application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. CVE-2026-44171: mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. CVE-2026-44168: During the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the donor side via the mariabackup SST method. CVE-2026-3494: In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (--) or hash (#) style comments, the statement is not logged. CVE-2026-34303: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Fixed packages 29

ReleasePackageFixed in
Amazon Linux · 2023 mariadb1011 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-backup 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-backup-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-client-utils 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-common 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-connect-engine 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-connect-engine-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-cracklib-password-check 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-cracklib-password-check-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-debugsource 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-devel 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-errmsg 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-gssapi-server 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-gssapi-server-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-oqgraph-engine 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-oqgraph-engine-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-pam 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-pam-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-rocksdb-engine 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-rocksdb-engine-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-server 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-server-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-server-utils 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-server-utils-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-sphinx-engine 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-sphinx-engine-debuginfo 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-test 3:10.11.18-1.amzn2023.0.1
Amazon Linux · 2023 mariadb1011-test-debuginfo 3:10.11.18-1.amzn2023.0.1

Vulnerabilities 6

  • High 8.0
    CVE-2026-44168

    MariaDB: wsrep SST unsafe parameter handling on the donor side

    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during the SST the donor node is interpolating parameters that the…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine Wolfi
  • Medium 6.9
    CVE-2026-44172

    MariaDB: mysql_real_escape_string() incorrectly handled big5

    MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 charac…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine PyPI
  • Medium 6.5
    CVE-2026-34303

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

    Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux
  • Medium 6.3
    CVE-2026-44171

    MariaDB: path traversal in mbstream

    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the arc…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine Wolfi
  • Medium 5.0
    CVE-2026-44173

    MariaDB: FILE privilege was not checked for subqueries in the FROM clause

    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFI…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine Wolfi
  • Medium 4.3
    CVE-2026-3494 Public exploit

    MariaDB Server Audit Plugin Comment Handling Bypass

    In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen…

    amazon MariaDB Aurora MySQL RDS for MariaDB Debian Ubuntu Azure Linux Alpine Wolfi

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-34303.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-3494.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-44168.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-44171.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-44172.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-44173.html