Skip to content
OpenAdvisories
High ELSA-2026-33093 1 CVE

Important: mariadb10.11 security, bug fix, and enhancement update (Oracle Linux 10)

Published Jul 16, 2026 · Updated Jul 16, 2026

Ecosystem: Oracle Linux

Summary

[3:10.11.18-1]
- Rebase to 10.11.18

[3:10.11.17-1]
- Rebase to 10.11.17

[3:10.11.16-1]
- Rebase to 10.11.16

Fixed packages 15

ReleasePackageFixed in
Oracle Linux · 10 mariadb 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-backup 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-client-utils 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-common 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-devel 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-embedded 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-embedded-devel 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-errmsg 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-gssapi-server 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-oqgraph-engine 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-pam 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-server 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-server-galera 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-server-utils 3:10.11.18-1.el10_2
Oracle Linux · 10 mariadb-test 3:10.11.18-1.el10_2

Vulnerabilities 1

  • Critical 10.0
    CVE-2026-49261

    MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

    MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the nam…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Wolfi