Most recent entries from all

BELL-CVE-2026-44169

Affected: Alpaquita:25: mariadb, Alpaquita:stream: mariadb

BIT-mariadb-2026-44169 — MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

Affected: Bitnami: mariadb

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

EUVD-2026-326972

fkie_cve-2026-44169

openSUSE-SU-2026:10897-1 — libmariadbd-devel-11.8.7-1.1 on GA media

libmariadbd-devel-11.8.7-1.1 on GA media

RHSA-2026:25143 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine mariadb: mbstream: Unauthorized file creation via path traversal mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries urllib3: urllib3: Denial of Service due to excessive HTTP response decompression mariadb: Arbitrary code execution via improper parameter validation during SST mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd

RLSA-2026:33412 — Important: galera and mariadb11.8 security, bug fix, and enhancement update

Affected: Rocky Linux:10: galera, Rocky Linux:10: mariadb11.8

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

* mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)

Bug Fix(es) and Enhancement(s):

* Rebase MariaDB 11.8 to 11.8.8 in Rocky Linux10 (JIRA:Rocky Linux-183084)

* Rebase Galera to 26.4.27 in Rocky Linux10 (JIRA:Rocky Linux-183259)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:22095-1 — Security update for mariadb

Security update for mariadb

UBUNTU-CVE-2026-44169

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6, Ubuntu:24.04:LTS: mariadb, Ubuntu:25.10: mariadb, Ubuntu:26.04:LTS: mariadb

WID-SEC-W-2026-1597 — MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.