Skip to content
OpenAdvisories
High ELSA-2026-33481 1 CVE

Important: mariadb:11.8 security, bug fix, and enhancement update (Oracle Linux 9)

Published Jul 2, 2026 · Updated Jul 2, 2026

Summary

galera
[26.4.27-1.0.1]
- Drop nmap-ncat requirement. [Orabug: 34116228]
- Requirement to delete lp1184034 test case without using patches.

[26.4.27-1]
- Rebased to 26.4.27

[26.4.26-1]
- Rebased to 26.4.26

mariadb
[3:11.8.8-1]
- Rebase to 11.8.8

[3:11.8.7-1]
- Rebase to 11.8.7

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 9 galera 0:26.4.27-1.0.1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-backup 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-client-utils 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-common 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-devel 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-embedded 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-embedded-devel 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-errmsg 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-gssapi-server 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-oqgraph-engine 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-pam 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-server 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-server-galera 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-server-utils 3:11.8.8-1.module+el9.8.0+90939+4d45f560
Oracle Linux · 9 mariadb-test 3:11.8.8-1.module+el9.8.0+90939+4d45f560

Vulnerabilities 1

  • Critical 10.0

    MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

    MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the nam…