Summary
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.
Security Fix(es):
* mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | galera | 26.4.20-1.module_el8.10.0+3955+6534edaf |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.10.0+3794+c6a66d65 |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.10.0+3955+6534edaf |
| AlmaLinux · 8 | mariadb | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-backup | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-common | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-devel | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-embedded | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-embedded-devel | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-errmsg | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-gssapi-server | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-oqgraph-engine | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-pam | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-server | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-server-galera | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-server-utils | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
| AlmaLinux · 8 | mariadb-test | 3:10.11.10-2.module_el8.10.0+4091+e8693c5e |
Vulnerabilities 1
-
High 7.0
MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability
MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit t…