Skip to content
OpenAdvisories
High RLSA-2026:0233 1 CVE

Important: mariadb:10.5 security update

Published Jan 9, 2026 · Updated Jan 9, 2026

Ecosystem: Rocky Linux

Summary

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

* mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 7

ReleasePackageFixed in
Rocky Linux · 8 galera 0:26.4.22-1.module+el8.10.0+2082+43759dcc
Rocky Linux · 8 Judy 0:1.0.5-18.module+el8.10.0+40062+b4bfe4b1
Rocky Linux · 8 Judy 0:1.0.5-18.module+el8.10.0+1674+fa55eae9
Rocky Linux · 8 Judy 0:1.0.5-18.module+el8.4.0+427+adf35707
Rocky Linux · 8 Judy 0:1.0.5-18.module+el8.10.0+1925+356c22e8
Rocky Linux · 8 Judy 0:1.0.5-18.module+el8.4.0+431+26aaed18
Rocky Linux · 8 mariadb 3:10.5.29-3.module+el8.10.0+40063+c69b01bb

Vulnerabilities 1

  • High 7.0
    CVE-2025-13699

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit t…

    MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2417693