Description
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, during the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the donor side via the rsync SST method. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MariaDB | server | >= 10.6.1, < 10.6.27, >= 10.11.1, < 10.11.18, >= 11.4.1, < 11.4.12, >= 11.8.1, < 11.8.8, >= 12.3.1, < 12.3.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mariadb | 1:11.8.8-1 | — |
| Debian 13 | mariadb | No fix yet | — |
| Debian 12 | mariadb | 1:10.11.18-0+deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | mariadb | 1:11.8.6-5ubuntu0.1 | — |
| Ubuntu 25.10 | mariadb | No fix yet | — |
| Ubuntu 24.04 LTS | mariadb | No fix yet | — |
| Ubuntu 22.04 LTS | mariadb-10.6 | No fix yet | — |
| Ubuntu 20.04 LTS | mariadb-10.3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | mariadb +15 | 3:10.11.18-1.el10_2 | RHSA-2026:33093 |
| RHEL 10 | mariadb11.8 +14 | 3:11.8.8-1.el10_2 | RHSA-2026:33412 |
| RHEL 9 | galera | 26.4.27-1.module+el9.8.0+24388+85f1c439 | RHSA-2026:33482, RHSA-2026:33481 |
| RHEL 9 | mariadb +13 | 3:10.11.18-1.module+el9.8.0+24388+85f1c439 | RHSA-2026:33482, RHSA-2026:33481 |
| RHEL 9 | mariadb-client-utils | 3:11.8.8-1.module+el9.8.0+24389+c97c30be | RHSA-2026:33481 |
| RHEL 8 | Judy | 1.0.5-18.module+el8.10.0+21221+7bee72c1 | RHSA-2026:33464 |
| RHEL 8 | galera | 26.4.27-1.module+el8.10.0+24403+8b846dba | RHSA-2026:33464 |
| RHEL 8 | mariadb +13 | 3:10.11.18-1.module+el8.10.0+24403+8b846dba | RHSA-2026:33464 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | mariadb +15 | 3:10.11.18-1.el10_0 | RHSA-2026:49522 |
| Red Hat Hardened Images 1 | mariadb +20 | 11.8.8-1.hum1 | RHSA-2026:25143 |
| Red Hat Hardened Images 1 | mariadb10.11 +19 | 10.11.18-1.hum1 | RHSA-2026:25145 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | galera | 26.4.27-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux 10 | mariadb +14 | 3:10.11.18-1.el10_2.alma.1 | ALSA-2026:33093 |
| AlmaLinux 10 | mariadb11.8 +14 | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux 9 | galera | 26.4.27-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33482, ALSA-2026:33481 |
| AlmaLinux 9 | mariadb +13 | 3:10.11.18-1.module_el9.8.0+275+ff40c56f | ALSA-2026:33482, ALSA-2026:33481 |
| AlmaLinux 9 | mariadb-client-utils | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux 8 | Judy | 1.0.5-18.module_el8.10.0+3794+c6a66d65 | ALSA-2026:33464 |
| AlmaLinux 8 | galera | 26.4.27-1.module_el8.10.0+4207+a44b0e1e | ALSA-2026:33464 |
| AlmaLinux 8 | mariadb +13 | 3:10.11.18-1.module_el8.10.0+4207+a44b0e1e | ALSA-2026:33464 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | galera | 26.4.27-1.el10_2 | RLSA-2026:33412 |
| Rocky Linux 10 | mariadb10.11 | 3:10.11.18-1.el10_2 | RLSA-2026:33093 |
| Rocky Linux 9 | galera | 26.4.27-1.module+el9.8.0+40229+87be66a2 | RLSA-2026:33482, RLSA-2026:33481 |
| Rocky Linux 9 | mariadb | 3:10.11.18-1.module+el9.8.0+40232+a354f53a | RLSA-2026:33482, RLSA-2026:33481 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | mariadb | 11.8.8-150700.3.15.1 | SUSE-SU-2026:2330-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | mariadb | 11.8.8-160000.1.1 | SUSE-SU-2026:22095-1 |
| SLES 16.0 | mariadb | 11.8.8-160000.1.1 | SUSE-SU-2026:22095-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | mariadb | 11.8.8-1.1 | openSUSE-SU-2026:10934-1 |
| openSUSE Leap 16.0 | mariadb | 11.8.8-160000.1.1 | openSUSE-SU-2026:20933-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | mariadb | 11.8.8-r0 | — |
| Alpine v3.23 | mariadb | 11.4.12-r0 | — |
| Alpine v3.22 | mariadb | 11.4.12-r0 | — |
| Alpine v3.21 | mariadb | 11.4.12-r0 | — |
| Alpine v3.20 | mariadb | 10.11.18-r0 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | galera | 26.4.27-1.el10_2 | ELSA-2026-33412 |
| Oracle Linux 10 | mariadb11.8 +14 | 3:11.8.8-1.el10_2 | ELSA-2026-33412 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | mariadb-11.8 | 11.8.9-r1 | — |
Advisories 23
- ALSA-2026:33412 Important: galera and mariadb11.8 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33481 Important: mariadb:11.8 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33482 Important: mariadb:10.11 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33093 Important: mariadb10.11 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33464 Important: mariadb:10.11 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:25143 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:49522 Red Hat Security Advisory: mariadb10.11 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:25145 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:33482 Red Hat Security Advisory: mariadb:10.11 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33481 Red Hat Security Advisory: mariadb:11.8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33464 Red Hat Security Advisory: mariadb:10.11 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33412 Red Hat Security Advisory: galera and mariadb11.8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33093 Red Hat Security Advisory: mariadb10.11 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- WID-SEC-2026-1744 MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Aug 11, 2026
- ELSA-2026-33412 Important: galera and mariadb11.8 security, bug fix, and enhancement update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 16, 2026
- RLSA-2026:33412 Important: galera and mariadb11.8 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- RLSA-2026:33482 Important: mariadb:10.11 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- RLSA-2026:33093 Important: mariadb10.11 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- RLSA-2026:33481 Important: mariadb:11.8 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- SUSE-SU-2026:22095-1 Security update for mariadb SUSE / openSUSE Security Updates · Jun 16, 2026
- openSUSE-SU-2026:20933-1 Security update for mariadb SUSE / openSUSE Security Updates · Jun 13, 2026
- SUSE-SU-2026:2330-1 Security update for mariadb SUSE / openSUSE Security Updates · Jun 10, 2026
- openSUSE-SU-2026:10934-1 libmariadbd-devel-11.8.8-1.1 on GA media SUSE / openSUSE Security Updates · Jun 3, 2026