Skip to content
OpenAdvisories
Critical RHSA-2026:33482 7 CVEs

Red Hat Security Advisory: mariadb:10.11 security, bug fix, and enhancement update

Published Jul 1, 2026 · Updated Aug 12, 2026

Ecosystem: Red Hat

Fixed packages 27

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream galera 0:26.4.27-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream galera-debuginfo 0:26.4.27-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream galera-debugsource 0:26.4.27-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-backup 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-backup-debuginfo 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-common 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-debuginfo 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-debugsource 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-devel 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-embedded 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-embedded-debuginfo 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-embedded-devel 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-errmsg 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-gssapi-server 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-gssapi-server-debuginfo 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-oqgraph-engine 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-oqgraph-engine-debuginfo 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-pam 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-pam-debuginfo 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-server 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-server-debuginfo 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-server-galera 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-server-utils 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-server-utils-debuginfo 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-test 3:10.11.18-1.module+el9.8.0+24388+85f1c439
Red Hat · RHEL 9 enterprise_linux:9::appstream mariadb-test-debuginfo 3:10.11.18-1.module+el9.8.0+24388+85f1c439

Vulnerabilities 7

  • Critical 10.0
    CVE-2026-49261

    MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

    MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the nam…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Wolfi
  • High 8.0
    CVE-2026-44168

    MariaDB: wsrep SST unsafe parameter handling on the donor side

    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during the SST the donor node is interpolating parameters that the…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine Wolfi
  • High 8.0
    CVE-2026-48163

    MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)

    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, during the SST the donor node is interpolating parameters that the…

    MariaDB server mariadb-10.3 mariadb-10.6 Debian Ubuntu Alpine Wolfi
  • High 8.0
    CVE-2026-48165

    MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side

    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_add…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine Wolfi
  • Medium 6.3
    CVE-2026-44170

    MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL

    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB on WIndows with installed CONNECT engine and enabled REST …

    MariaDB server mariadb mariadb Ubuntu Alpine Wolfi
  • Medium 6.3
    CVE-2026-44171

    MariaDB: path traversal in mbstream

    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the arc…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine Wolfi
  • Medium 5.0
    CVE-2026-44173

    MariaDB: FILE privilege was not checked for subqueries in the FROM clause

    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFI…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2487957
  • article
    https://issues.redhat.com/browse/RHEL-140363
  • article
    https://issues.redhat.com/browse/RHEL-183087
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33482.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-44168
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2488450
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44168
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44168
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-vwf7-w26c-9w5h
  • article
    https://jira.mariadb.org/browse/MDEV-39413
  • report
    https://access.redhat.com/security/cve/CVE-2026-44170
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2488451
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44170
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44170
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-f835-cfjq-wf73
  • article
    https://jira.mariadb.org/browse/MDEV-39289
  • report
    https://access.redhat.com/security/cve/CVE-2026-44171
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2488453
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44171
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44171
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-9pjh-5hhw-65v9
  • article
    https://jira.mariadb.org/browse/MDEV-39408
  • report
    https://access.redhat.com/security/cve/CVE-2026-44173
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2488460
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44173
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44173
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-667j-m53j-wpmc
  • article
    https://jira.mariadb.org/browse/MDEV-39493
  • report
    https://access.redhat.com/security/cve/CVE-2026-48163
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2488454
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-48163
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-48163
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-rpgv-q6gv-684r
  • article
    https://jira.mariadb.org/browse/MDEV-39648
  • report
    https://access.redhat.com/security/cve/CVE-2026-48165
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2488458
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-48165
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-48165