Description
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MariaDB | server | >= 10.6.1, < 10.6.26, >= 10.11.1, < 10.11.17, >= 11.4.1, < 11.4.11, >= 11.8.1, < 11.8.7, >= 12.3.1, < 12.3.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mariadb | 1:11.8.8-1 | — |
| Debian 13 | mariadb | No fix yet | — |
| Debian 12 | mariadb | 1:10.11.18-0+deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | mariadb | 1:11.8.6-5ubuntu0.1 | — |
| Ubuntu 25.10 | mariadb | No fix yet | — |
| Ubuntu 24.04 LTS | mariadb | No fix yet | — |
| Ubuntu 22.04 LTS | mariadb-10.6 | No fix yet | — |
| Ubuntu 20.04 LTS | mariadb-10.3 | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | mariadb-10.1 | No fix yet | — |
| Ubuntu 16.04 LTS | mariadb-10.0 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | mariadb +15 | 3:10.11.18-1.el10_2 | RHSA-2026:33093 |
| RHEL 10 | mariadb11.8 +14 | 3:11.8.8-1.el10_2 | RHSA-2026:33412 |
| RHEL 9 | galera | 26.4.27-1.module+el9.8.0+24388+85f1c439 | RHSA-2026:33482, RHSA-2026:33481 |
| RHEL 9 | mariadb +13 | 3:10.11.18-1.module+el9.8.0+24388+85f1c439 | RHSA-2026:33482, RHSA-2026:33481 |
| RHEL 9 | mariadb-client-utils | 3:11.8.8-1.module+el9.8.0+24389+c97c30be | RHSA-2026:33481 |
| RHEL 8 | Judy | 1.0.5-18.module+el8.10.0+21221+7bee72c1 | RHSA-2026:33464 |
| RHEL 8 | galera | 26.4.27-1.module+el8.10.0+24403+8b846dba | RHSA-2026:33464 |
| RHEL 8 | mariadb +13 | 3:10.11.18-1.module+el8.10.0+24403+8b846dba | RHSA-2026:33464 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | mariadb +15 | 3:10.11.18-1.el10_0 | RHSA-2026:49522 |
| Red Hat Hardened Images 1 | mariadb +20 | 11.8.8-1.hum1 | RHSA-2026:25143 |
| Red Hat Hardened Images 1 | mariadb10.11 +19 | 10.11.18-1.hum1 | RHSA-2026:25145 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | galera | 26.4.27-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux 10 | mariadb +14 | 3:10.11.18-1.el10_2.alma.1 | ALSA-2026:33093 |
| AlmaLinux 10 | mariadb11.8 +14 | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux 9 | galera | 26.4.27-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33482, ALSA-2026:33481 |
| AlmaLinux 9 | mariadb +13 | 3:10.11.18-1.module_el9.8.0+275+ff40c56f | ALSA-2026:33482, ALSA-2026:33481 |
| AlmaLinux 9 | mariadb-client-utils | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux 8 | Judy | 1.0.5-18.module_el8.10.0+3794+c6a66d65 | ALSA-2026:33464 |
| AlmaLinux 8 | galera | 26.4.27-1.module_el8.10.0+4207+a44b0e1e | ALSA-2026:33464 |
| AlmaLinux 8 | mariadb +13 | 3:10.11.18-1.module_el8.10.0+4207+a44b0e1e | ALSA-2026:33464 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | galera | 26.4.27-1.el10_2 | RLSA-2026:33412 |
| Rocky Linux 10 | mariadb10.11 | 3:10.11.18-1.el10_2 | RLSA-2026:33093 |
| Rocky Linux 9 | galera | 26.4.27-1.module+el9.8.0+40229+87be66a2 | RLSA-2026:33482, RLSA-2026:33481 |
| Rocky Linux 9 | mariadb | 3:10.11.18-1.module+el9.8.0+40232+a354f53a | RLSA-2026:33482, RLSA-2026:33481 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | mariadb | 11.8.8-150700.3.15.1 | SUSE-SU-2026:2330-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | mariadb | 11.8.8-160000.1.1 | SUSE-SU-2026:22095-1 |
| SLES 16.0 | mariadb | 11.8.8-160000.1.1 | SUSE-SU-2026:22095-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | mariadb | 11.8.7-1.1 | openSUSE-SU-2026:10897-1 |
| openSUSE Leap 16.0 | mariadb | 11.8.8-160000.1.1 | openSUSE-SU-2026:20933-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | mariadb | 11.8.7-r0 | — |
| Alpine v3.23 | mariadb | 11.4.11-r0 | — |
| Alpine v3.22 | mariadb | 11.4.11-r0 | — |
| Alpine v3.21 | mariadb | 11.4.11-r0 | — |
| Alpine v3.20 | mariadb | 10.11.17-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | mariadb1011 +15 | 3:10.11.18-1.amzn2023.0.1 | ALAS2023-2026-1844 |
| Amazon Linux 2023 | mariadb114 +15 | 3:11.4.12-1.amzn2023.0.1 | ALAS2023-2026-1845 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | galera | 26.4.27-1.el10_2 | ELSA-2026-33412 |
| Oracle Linux 10 | mariadb11.8 +14 | 3:11.8.8-1.el10_2 | ELSA-2026-33412 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | mariadb-11.8 | 11.8.9-r1 | — |
Advisories 25
- ALSA-2026:33412 Important: galera and mariadb11.8 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33481 Important: mariadb:11.8 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33482 Important: mariadb:10.11 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33093 Important: mariadb10.11 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- WID-SEC-2026-1597 MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Nov 3, 2026
- ALSA-2026:33464 Important: mariadb:10.11 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:25143 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:49522 Red Hat Security Advisory: mariadb10.11 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:25145 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:33482 Red Hat Security Advisory: mariadb:10.11 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33481 Red Hat Security Advisory: mariadb:11.8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33464 Red Hat Security Advisory: mariadb:10.11 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33412 Red Hat Security Advisory: galera and mariadb11.8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33093 Red Hat Security Advisory: mariadb10.11 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- ELSA-2026-33412 Important: galera and mariadb11.8 security, bug fix, and enhancement update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 16, 2026
- RLSA-2026:33412 Important: galera and mariadb11.8 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- RLSA-2026:33482 Important: mariadb:10.11 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- RLSA-2026:33093 Important: mariadb10.11 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- RLSA-2026:33481 Important: mariadb:11.8 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- ALAS2023-2026-1845 Important: mariadb114 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 22, 2026
- ALAS2023-2026-1844 Important: mariadb1011 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 22, 2026
- SUSE-SU-2026:22095-1 Security update for mariadb SUSE / openSUSE Security Updates · Jun 16, 2026
- openSUSE-SU-2026:20933-1 Security update for mariadb SUSE / openSUSE Security Updates · Jun 13, 2026
- SUSE-SU-2026:2330-1 Security update for mariadb SUSE / openSUSE Security Updates · Jun 10, 2026
- openSUSE-SU-2026:10897-1 libmariadbd-devel-11.8.7-1.1 on GA media SUSE / openSUSE Security Updates · May 30, 2026