Summary
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.
Security Fix(es):
* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
* mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
* mariadb: MariaDB Server Crash (CVE-2023-52971)
* mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
* mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | galera | 26.4.23-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.10.0+3794+c6a66d65 |
| AlmaLinux · 8 | Judy | 1.0.5-18.module_el8.10.0+3955+6534edaf |
| AlmaLinux · 8 | mariadb | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-backup | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-common | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-devel | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-embedded | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-embedded-devel | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-errmsg | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-gssapi-server | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-oqgraph-engine | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-pam | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-server | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-server-galera | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-server-utils | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
| AlmaLinux · 8 | mariadb-test | 3:10.11.15-1.module_el8.10.0+4152+4d93c53f |
Vulnerabilities 7
-
Medium 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 5.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 5.3
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a…
-
Medium 4.9
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes cr…
-
Medium 4.9
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11…
-
Medium 4.9
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
References
-
report
https://access.redhat.com/security/cve/CVE-2023-52969
-
report
https://access.redhat.com/security/cve/CVE-2023-52970
-
report
https://access.redhat.com/security/cve/CVE-2023-52971
-
report
https://access.redhat.com/security/cve/CVE-2025-21490
-
report
https://access.redhat.com/security/cve/CVE-2025-30693
-
report
https://access.redhat.com/security/cve/CVE-2025-30722
-
report
https://access.redhat.com/security/cve/CVE-2026-21968
-
report
https://bugzilla.redhat.com/2339221
-
report
https://bugzilla.redhat.com/2350916
-
report
https://bugzilla.redhat.com/2350917
-
report
https://bugzilla.redhat.com/2350918
-
report
https://bugzilla.redhat.com/2359885
-
report
https://bugzilla.redhat.com/2359963
-
report
https://bugzilla.redhat.com/2431409
-
advisory
https://errata.almalinux.org/8/ALSA-2026-6435.html