Skip to content
OpenAdvisories
High ELSA-2026-0367 1 CVE

Important: mariadb security update (Oracle Linux 7)

Published Jan 28, 2026 · Updated Jan 28, 2026

Ecosystem: Oracle Linux

Summary

[1:5.5.68-1.0.1]
- Fixes CVE-2025-13699, remote code execution via improper path validation [Orabug: 38829265]
- Fixes failing SSL and timezone tests

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 mariadb 1:5.5.68-1.0.1.el7
Oracle Linux · 7 mariadb-bench 1:5.5.68-1.0.1.el7
Oracle Linux · 7 mariadb-devel 1:5.5.68-1.0.1.el7
Oracle Linux · 7 mariadb-embedded 1:5.5.68-1.0.1.el7
Oracle Linux · 7 mariadb-embedded-devel 1:5.5.68-1.0.1.el7
Oracle Linux · 7 mariadb-libs 1:5.5.68-1.0.1.el7
Oracle Linux · 7 mariadb-server 1:5.5.68-1.0.1.el7
Oracle Linux · 7 mariadb-test 1:5.5.68-1.0.1.el7

Vulnerabilities 1

  • High 7.0
    CVE-2025-13699

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit t…

    MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux