Skip to content
OpenAdvisories
High RHSA-2026:0112 1 CVE

Red Hat Security Advisory: mariadb security update

Published Jan 7, 2026 · Updated Jul 9, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-backup 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-backup-debuginfo 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-common 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-debuginfo 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-debugsource 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-embedded 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-embedded-debuginfo 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-errmsg 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-gssapi-server 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-gssapi-server-debuginfo 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-oqgraph-engine 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-oqgraph-engine-debuginfo 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-pam 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-pam-debuginfo 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-server 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-server-debuginfo 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-server-galera 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-server-utils 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-server-utils-debuginfo 3:10.5.22-2.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream mariadb-test-debuginfo 3:10.5.22-2.el9_2

Vulnerabilities 1

  • High 7.0
    CVE-2025-13699

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit t…

    MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2417693
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0112.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-13699
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-13699
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-13699