Skip to content
OpenAdvisories
High ALSA-2026:0247 8 CVEs

Important: mariadb:10.11 security update

Published Jan 7, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
* mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
* mariadb: MariaDB Server Crash (CVE-2023-52971)
* mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
* mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
* mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 15

ReleasePackageFixed in
AlmaLinux · 9 galera 26.4.20-1.module_el9.5.0+135+c9657a87
AlmaLinux · 9 mariadb 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-backup 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-common 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-devel 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-embedded 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-embedded-devel 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-errmsg 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-gssapi-server 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-oqgraph-engine 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-pam 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-server 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-server-galera 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-server-utils 3:10.11.15-1.module_el9.7.0+199+a988ea01
AlmaLinux · 9 mariadb-test 3:10.11.15-1.module_el9.7.0+199+a988ea01

Vulnerabilities 8

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-52969
  • report
    https://access.redhat.com/security/cve/CVE-2023-52970
  • report
    https://access.redhat.com/security/cve/CVE-2023-52971
  • report
    https://access.redhat.com/security/cve/CVE-2025-13699
  • report
    https://access.redhat.com/security/cve/CVE-2025-21490
  • report
    https://access.redhat.com/security/cve/CVE-2025-30693
  • report
    https://access.redhat.com/security/cve/CVE-2025-30722
  • report
    https://bugzilla.redhat.com/2339221
  • report
    https://bugzilla.redhat.com/2350916
  • report
    https://bugzilla.redhat.com/2350917
  • report
    https://bugzilla.redhat.com/2350918
  • report
    https://bugzilla.redhat.com/2359885
  • report
    https://bugzilla.redhat.com/2359963
  • report
    https://bugzilla.redhat.com/2417693
  • advisory
    https://errata.almalinux.org/9/ALSA-2026-0247.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2026-21968.html