Skip to content
OpenAdvisories
High ELSA-2026-33482 1 CVE

Important: mariadb:10.11 security, bug fix, and enhancement update (Oracle Linux 9)

Published Jul 2, 2026 · Updated Jul 2, 2026

Summary

galera
[26.4.20-1.0.1]
- Drop nmap-ncat requirement. [Orabug: 34116228]
- Requirement to delete garbd-wrapper script and lp1184034 test case
without using patches. [Orabug: 34116228]

[26.4.20-1]
- Rebase to 26.4.20

[26.4.19-1]
- Rebase to 26.4.19

[26.4.18-1]
- Rebase to 26.4.18

[26.4.16-1]
- Rebase to 26.4.16

[26.4.14-1]
- Rebase to 26.4.14

mariadb
[3:10.11.18-1]
- Rebase to 10.11.18

[3:10.11.17-1]
- Rebase to 10.11.17

[3:10.11.16-1]
- Rebase to 10.11.16

Fixed packages 15

ReleasePackageFixed in
Oracle Linux · 9 galera 0:26.4.20-1.0.1.module+el9.5.0+90507+82ceef20
Oracle Linux · 9 mariadb 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-backup 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-common 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-devel 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-embedded 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-embedded-devel 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-errmsg 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-gssapi-server 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-oqgraph-engine 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-pam 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-server 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-server-galera 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-server-utils 3:10.11.18-1.module+el9.8.0+90943+a8062e5c
Oracle Linux · 9 mariadb-test 3:10.11.18-1.module+el9.8.0+90943+a8062e5c

Vulnerabilities 1

  • Critical 10.0

    MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

    MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the nam…