Skip to content
OpenAdvisories
High RLSA-2026:0136 7 CVEs

Important: mariadb10.11 security update

Published Jan 9, 2026 · Updated Jan 9, 2026

Ecosystem: Rocky Linux

Summary

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

* mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)

* mariadb: MariaDB Server Crash (CVE-2023-52971)

* mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)

* mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

* mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 mariadb10.11 3:10.11.15-1.el10_1

Vulnerabilities 7

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2339221
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2350918
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2359963
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2350917
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2417693
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2359885
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2350916