Skip to content
OpenAdvisories
High ELSA-2026-33464 1 CVE

Important: mariadb:10.11 security, bug fix, and enhancement update (Oracle Linux 8)

Published Jun 30, 2026 · Updated Jun 30, 2026

Summary

galera
[26.4.27-1]
- Rebased to 26.4.27

[26.4.26-1]
- Rebased to 26.4.26

[26.4.25-1]
- Rebased to 26.4.25

[26.4.24-1]
- Rebase to 26.4.24

Judy
[1.0.5-18]
- Remove README.Fedora; no longer needed since 1.0.5 version
- Resolves: #1638717

[1.0.5-17]
- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
- Drop legacy BuildRoot: and Group: tags
- Drop redundant explicit buildroot cleaning
- Specify all explicitly-used build requirements
- Use %license where possible
- Drop %defattr, redundant since rpm 4.4

[1.0.5-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.0.5-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.0.5-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.0.5-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.0.5-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.0.5-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.0.5-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.0.5-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

mariadb
[3:10.11.18-1]
- Rebase to 10.11.18

[3:10.11.17-1]
- Rebase to 10.11.17

[3:10.11.16-1]
- Rebase to 10.11.16

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 8 galera 0:26.4.27-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 Judy 0:1.0.5-18.module+el8.10.0+90753+7c7ea859
Oracle Linux · 8 mariadb 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-backup 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-common 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-devel 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-embedded 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-embedded-devel 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-errmsg 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-gssapi-server 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-oqgraph-engine 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-pam 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-server 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-server-galera 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-server-utils 3:10.11.18-1.module+el8.10.0+90935+8cfac62f
Oracle Linux · 8 mariadb-test 3:10.11.18-1.module+el8.10.0+90935+8cfac62f

Vulnerabilities 1

  • Critical 10.0

    MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

    MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the nam…