Priority MEDIUM 52
MariaDB server is a community developed fork of MySQL server.
RHSA-2026:49522
mariadb10.11 security update
Released 2026-08-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) mariadb-3:10.11.18-1.el10_0, mariadb-backup-3:10.11.18-1.el10_0, mariadb-client-utils-3:10.11.18-1.el10_0 +13
Fixes 12 records
TI-2026-35600 CVE-2026-48165
MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side
Priority MEDIUM 40
MariaDB server is a community developed fork of MySQL server.
Priority LOW 39
MariaDB server is a community developed fork of MySQL server.
Priority LOW 38
MariaDB server is a community developed fork of MySQL server.
TI-2026-32151 CVE-2026-44171
MariaDB: path traversal in mbstream
Priority LOW 35
MariaDB server is a community developed fork of MySQL server.
TI-2026-32150 CVE-2026-44170
MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL
Priority LOW 33
MariaDB server is a community developed fork of MySQL server.
TI-2025-21995 CVE-2025-30722 · GHSA-53hw-hvww-v6v8
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).
Priority LOW 31
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).
TI-2025-21966 CVE-2025-30693 · GHSA-2cqp-v7m3-p6hm
Improper access control in Oracle MySQL Cluster
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
TI-2026-32153 CVE-2026-44173
MariaDB: FILE privilege was not checked for subqueries in the FROM clause
Priority LOW 25
MariaDB server is a community developed fork of MySQL server.
TI-2023-29279 CVE-2023-52971 · GHSA-j57w-cc2h-3w6w
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
Priority LOW 23
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
TI-2023-29278 CVE-2023-52970 · GHSA-g8xg-6v3j-w97f
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0…
Priority LOW 23
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.
TI-2023-29277 CVE-2023-52969 · GHSA-gx7h-6fr6-j29h
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0…
Priority LOW 23
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log.