RHSA-2026:6435 — Red Hat Security Advisory: mariadb:10.11 security update

Fixed packages 30

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	galera	0:26.4.23-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	galera-debuginfo	0:26.4.23-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	galera-debugsource	0:26.4.23-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	Judy	0:1.0.5-18.module+el8.10.0+21221+7bee72c1
Red Hat · RHEL 8 enterprise_linux:8::appstream	Judy-debuginfo	0:1.0.5-18.module+el8.10.0+21221+7bee72c1
Red Hat · RHEL 8 enterprise_linux:8::appstream	Judy-debugsource	0:1.0.5-18.module+el8.10.0+21221+7bee72c1
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-backup	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-backup-debuginfo	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-common	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-debuginfo	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-debugsource	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-devel	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-embedded	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-embedded-debuginfo	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-embedded-devel	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-errmsg	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-gssapi-server	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-gssapi-server-debuginfo	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-oqgraph-engine	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-oqgraph-engine-debuginfo	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-pam	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-pam-debuginfo	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-server	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-server-debuginfo	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-server-galera	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-server-utils	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-server-utils-debuginfo	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-test	3:10.11.15-1.module+el8.10.0+24010+d874728a
Red Hat · RHEL 8 enterprise_linux:8::appstream	mariadb-test-debuginfo	3:10.11.15-1.module+el8.10.0+24010+d874728a

Vulnerabilities 7

Medium 6.5

CVE-2026-21968

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux

Jan 20, 2026
Medium 5.5

CVE-2025-30693

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Azure Linux

Apr 15, 2025
Medium 5.3

CVE-2025-30722

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a…

Oracle MySQL Cluster MySQL Client percona-server-5.6 Debian Ubuntu

Apr 15, 2025
Medium 4.9

CVE-2023-52969

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes cr…

MariaDB MariaDB mariadb-10.6 mariadb Debian Ubuntu Azure Linux Wolfi

Mar 8, 2025
Medium 4.9

CVE-2023-52970

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11…

MariaDB MariaDB mariadb-10.6 mariadb Debian Ubuntu Azure Linux Wolfi

Mar 8, 2025
Medium 4.9

CVE-2023-52971

MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.

MariaDB MariaDB mariadb mariadb Debian Ubuntu Azure Linux Wolfi

Mar 8, 2025
Medium 4.9

CVE-2025-21490

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux Alpine Wolfi

Jan 21, 2025

References

article
https://access.redhat.com/security/updates/classification/#moderate
report
https://bugzilla.redhat.com/show_bug.cgi?id=2339221
report
https://bugzilla.redhat.com/show_bug.cgi?id=2350916
report
https://bugzilla.redhat.com/show_bug.cgi?id=2350917
report
https://bugzilla.redhat.com/show_bug.cgi?id=2350918
report
https://bugzilla.redhat.com/show_bug.cgi?id=2359885
report
https://bugzilla.redhat.com/show_bug.cgi?id=2359963
report
https://bugzilla.redhat.com/show_bug.cgi?id=2431409
article
https://issues.redhat.com/browse/RHEL-116757
article
https://issues.redhat.com/browse/RHEL-127157
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6435.json
report
https://access.redhat.com/security/cve/CVE-2023-52969
advisory
https://www.cve.org/CVERecord?id=CVE-2023-52969
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-52969
article
https://jira.mariadb.org/browse/MDEV-32083
report
https://access.redhat.com/security/cve/CVE-2023-52970
advisory
https://www.cve.org/CVERecord?id=CVE-2023-52970
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-52970
article
https://jira.mariadb.org/browse/MDEV-32086
report
https://access.redhat.com/security/cve/CVE-2023-52971
advisory
https://www.cve.org/CVERecord?id=CVE-2023-52971
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-52971
article
https://jira.mariadb.org/browse/MDEV-32084
report
https://access.redhat.com/security/cve/CVE-2025-21490
advisory
https://www.cve.org/CVERecord?id=CVE-2025-21490
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-21490
article
https://www.oracle.com/security-alerts/cpujan2025.html#AppendixMSQL
report
https://access.redhat.com/security/cve/CVE-2025-30693
advisory
https://www.cve.org/CVERecord?id=CVE-2025-30693
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-30693
article
https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixMSQL
report
https://access.redhat.com/security/cve/CVE-2025-30722
advisory
https://www.cve.org/CVERecord?id=CVE-2025-30722
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-30722
report
https://access.redhat.com/security/cve/CVE-2026-21968
advisory
https://www.cve.org/CVERecord?id=CVE-2026-21968
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-21968
article
https://www.oracle.com/security-alerts/cpujan2026.html#AppendixMSQL

Red Hat Security Advisory: mariadb:10.11 security update

Fixed packages 30

Vulnerabilities 7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a…

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes cr…

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11…

MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

References

Red Hat Security Advisory: mariadb:10.11 security update

Fixed packages 30

Vulnerabilities 7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a…

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes cr…

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11…

MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

References

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes cr…

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11…