Skip to content
OpenAdvisories
High ELSA-2026-0225 1 CVE

Important: mariadb:10.3 security update (Oracle Linux 8)

Published Jan 8, 2026 · Updated Jan 8, 2026

Ecosystem: Oracle Linux

Summary

galera
Judy
mariadb
[3:10.3.39-2]
- Release bump for rebuild

Fixed packages 15

ReleasePackageFixed in
Oracle Linux · 8 galera 0:25.3.37-1.module+el8.8.0+21165+f6462f70
Oracle Linux · 8 Judy 0:1.0.5-18.0.1.module+el8.3.0+9616+7a81225f
Oracle Linux · 8 mariadb 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-backup 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-common 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-devel 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-embedded 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-embedded-devel 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-errmsg 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-gssapi-server 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-oqgraph-engine 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-server 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-server-galera 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-server-utils 3:10.3.39-2.module+el8.10.0+90757+0fe265ac
Oracle Linux · 8 mariadb-test 3:10.3.39-2.module+el8.10.0+90757+0fe265ac

Vulnerabilities 1

  • High 7.0
    CVE-2025-13699

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit t…

    MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux