Description
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MariaDB | server | >= 10.6.1, < 10.6.27, >= 10.11.1, < 10.11.18, >= 11.4.1, < 11.4.12, >= 11.8.1, < 11.8.8, >= 12.3.1, < 12.3.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mariadb | 1:11.8.8-1 | — |
| Debian 13 | mariadb | No fix yet | — |
| Debian 12 | mariadb | 1:10.11.18-0+deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | mariadb | 1:11.8.6-5ubuntu0.1 | — |
| Ubuntu 25.10 | mariadb | No fix yet | — |
| Ubuntu 24.04 LTS | mariadb | No fix yet | — |
| Ubuntu 22.04 LTS | mariadb-10.6 | No fix yet | — |
| Ubuntu 20.04 LTS | mariadb-10.3 | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | mariadb-10.1 | No fix yet | — |
| Ubuntu 16.04 LTS | mariadb-10.0 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | mariadb +15 | 3:10.11.18-1.el10_2 | RHSA-2026:33093 |
| RHEL 10 | mariadb11.8 +14 | 3:11.8.8-1.el10_2 | RHSA-2026:33412 |
| RHEL 9 | galera | 26.4.27-1.module+el9.8.0+24388+85f1c439 | RHSA-2026:33482, RHSA-2026:33481 |
| RHEL 9 | mariadb +13 | 3:10.11.18-1.module+el9.8.0+24388+85f1c439 | RHSA-2026:33482, RHSA-2026:33481 |
| RHEL 9 | mariadb-client-utils | 3:11.8.8-1.module+el9.8.0+24389+c97c30be | RHSA-2026:33481 |
| RHEL 8 | Judy | 1.0.5-18.module+el8.10.0+21221+7bee72c1 | RHSA-2026:33464 |
| RHEL 8 | galera | 26.4.27-1.module+el8.10.0+24403+8b846dba | RHSA-2026:33464 |
| RHEL 8 | mariadb +13 | 3:10.11.18-1.module+el8.10.0+24403+8b846dba | RHSA-2026:33464 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | mariadb +15 | 3:10.11.18-1.el10_0 | RHSA-2026:49522 |
| Red Hat Hardened Images 1 | mariadb +20 | 11.8.8-1.hum1 | RHSA-2026:25143 |
| Red Hat Hardened Images 1 | mariadb10.11 +19 | 10.11.18-1.hum1 | RHSA-2026:25145 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | galera | 26.4.27-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux 10 | mariadb +14 | 3:10.11.18-1.el10_2.alma.1 | ALSA-2026:33093 |
| AlmaLinux 10 | mariadb11.8 +14 | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux 9 | galera | 26.4.27-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33482, ALSA-2026:33481 |
| AlmaLinux 9 | mariadb +13 | 3:10.11.18-1.module_el9.8.0+275+ff40c56f | ALSA-2026:33482, ALSA-2026:33481 |
| AlmaLinux 9 | mariadb-client-utils | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux 8 | Judy | 1.0.5-18.module_el8.10.0+3794+c6a66d65 | ALSA-2026:33464 |
| AlmaLinux 8 | galera | 26.4.27-1.module_el8.10.0+4207+a44b0e1e | ALSA-2026:33464 |
| AlmaLinux 8 | mariadb +13 | 3:10.11.18-1.module_el8.10.0+4207+a44b0e1e | ALSA-2026:33464 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | galera | 26.4.27-1.el10_2 | RLSA-2026:33412 |
| Rocky Linux 10 | mariadb10.11 | 3:10.11.18-1.el10_2 | RLSA-2026:33093 |
| Rocky Linux 9 | galera | 26.4.27-1.module+el9.8.0+40229+87be66a2 | RLSA-2026:33482, RLSA-2026:33481 |
| Rocky Linux 9 | mariadb | 3:10.11.18-1.module+el9.8.0+40232+a354f53a | RLSA-2026:33482, RLSA-2026:33481 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | mariadb | 11.8.8-150700.3.15.1 | SUSE-SU-2026:2330-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | mariadb | 11.8.8-160000.1.1 | SUSE-SU-2026:22095-1 |
| SLES 16.0 | mariadb | 11.8.8-160000.1.1 | SUSE-SU-2026:22095-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | mariadb | 11.8.8-1.1 | openSUSE-SU-2026:10934-1 |
| openSUSE Leap 16.0 | mariadb | 11.8.8-160000.1.1 | openSUSE-SU-2026:20933-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | mariadb | 11.8.8-r0 | — |
| Alpine v3.23 | mariadb | 11.4.12-r0 | — |
| Alpine v3.22 | mariadb | 11.4.12-r0 | — |
| Alpine v3.21 | mariadb | 11.4.12-r0 | — |
| Alpine v3.20 | mariadb | 10.11.18-r0 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | galera | 26.4.27-1.el10_2 | ELSA-2026-33412 |
| Oracle Linux 10 | mariadb11.8 +14 | 3:11.8.8-1.el10_2 | ELSA-2026-33412 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | mariadb-11.8 | 11.8.9-r1 | — |
Advisories 23
- ALSA-2026:33412 Important: galera and mariadb11.8 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33481 Important: mariadb:11.8 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33482 Important: mariadb:10.11 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33093 Important: mariadb10.11 security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:33464 Important: mariadb:10.11 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:25143 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:49522 Red Hat Security Advisory: mariadb10.11 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2026:25145 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:33482 Red Hat Security Advisory: mariadb:10.11 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33481 Red Hat Security Advisory: mariadb:11.8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33464 Red Hat Security Advisory: mariadb:10.11 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33412 Red Hat Security Advisory: galera and mariadb11.8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- RHSA-2026:33093 Red Hat Security Advisory: mariadb10.11 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 12, 2026
- WID-SEC-2026-1744 MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Aug 11, 2026
- ELSA-2026-33412 Important: galera and mariadb11.8 security, bug fix, and enhancement update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 16, 2026
- RLSA-2026:33412 Important: galera and mariadb11.8 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- RLSA-2026:33482 Important: mariadb:10.11 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- RLSA-2026:33093 Important: mariadb10.11 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- RLSA-2026:33481 Important: mariadb:11.8 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 5, 2026
- SUSE-SU-2026:22095-1 Security update for mariadb SUSE / openSUSE Security Updates · Jun 16, 2026
- openSUSE-SU-2026:20933-1 Security update for mariadb SUSE / openSUSE Security Updates · Jun 13, 2026
- SUSE-SU-2026:2330-1 Security update for mariadb SUSE / openSUSE Security Updates · Jun 10, 2026
- openSUSE-SU-2026:10934-1 libmariadbd-devel-11.8.8-1.1 on GA media SUSE / openSUSE Security Updates · Jun 3, 2026