Skip to content
OpenAdvisories
High ALSA-2026:0137 1 CVE

Important: mariadb security update

Published Jan 6, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

* mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 14

ReleasePackageFixed in
AlmaLinux · 9 mariadb 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-backup 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-common 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-devel 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-embedded 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-embedded-devel 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-errmsg 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-gssapi-server 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-oqgraph-engine 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-pam 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-server 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-server-galera 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-server-utils 3:10.5.29-3.el9_7
AlmaLinux · 9 mariadb-test 3:10.5.29-3.el9_7

Vulnerabilities 1

  • High 7.0
    CVE-2025-13699

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit t…

    MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-13699
  • report
    https://bugzilla.redhat.com/2417693
  • advisory
    https://errata.almalinux.org/9/ALSA-2026-0137.html