RHSA-2026:49522: Important: mariadb10.11 security update

Published Aug 3, 2026
·
Updated

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.Security Fix(es): mariadb: MariaDB Server: Arbitrary code execution via wsrepnotifycmd (CVE-2026-49261) mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer (CVE-2026-44168) mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine (CVE-2026-44170) mariadb: mbstream: Unauthorized file creation via path traversal (CVE-2026-44171) mariadb: Arbitrary code execution via improper parameter validation during SST (CVE-2026-48163) mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user (CVE-2026-48165) mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries (CVE-2026-44173) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

99 affected componentsFixes available
redhat/mariadb10.11<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-backup<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-backup-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-client-utils<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-common<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-devel<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-embedded<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-embedded-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-embedded-devel<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-errmsg<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-gssapi-server<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-gssapi-server-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-oqgraph-engine<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-oqgraph-engine-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-pam<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-pam-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-galera<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-utils<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-utils-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-test<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-test-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb10.11-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb10.11-debugsource<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-backup<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-backup-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-client-utils<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-devel<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-embedded<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-embedded-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-embedded-devel<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-gssapi-server<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-gssapi-server-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-oqgraph-engine<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-oqgraph-engine-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-pam<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-pam-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-galera<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-utils<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-utils-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-test<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-test-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb10.11-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb10.11-debugsource<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-backup<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-backup-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-client-utils<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-devel<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-embedded<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-embedded-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-embedded-devel<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-gssapi-server<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-gssapi-server-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-oqgraph-engine<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-oqgraph-engine-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-pam<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-pam-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-galera<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-utils<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-server-utils-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-test<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb-test-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb10.11-debuginfo<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb10.11-debugsource<10.11.18-1.el10_0
10.11.18-1.el10_0
redhat/mariadb<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-backup<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-backup-debuginfo<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-client-utils<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-debuginfo<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-devel<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-embedded<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-embedded-debuginfo<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-embedded-devel<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-gssapi-server<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-gssapi-server-debuginfo<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-oqgraph-engine<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-oqgraph-engine-debuginfo<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-pam<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-pam-debuginfo<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-server<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-server-debuginfo<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-server-galera<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-server-utils<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-server-utils-debuginfo<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-test<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb-test-debuginfo<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb10.11-debuginfo<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa
redhat/mariadb10.11-debugsource<10.11.18-1.el10_0.aa
10.11.18-1.el10_0.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/mariadb10.11 to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  2. Upgrade

    Upgrade redhat/mariadb to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  3. Upgrade

    Upgrade redhat/mariadb-backup to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  4. Upgrade

    Upgrade redhat/mariadb-backup-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  5. Upgrade

    Upgrade redhat/mariadb-client-utils to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  6. Upgrade

    Upgrade redhat/mariadb-common to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  7. Upgrade

    Upgrade redhat/mariadb-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  8. Upgrade

    Upgrade redhat/mariadb-devel to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  9. Upgrade

    Upgrade redhat/mariadb-embedded to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  10. Upgrade

    Upgrade redhat/mariadb-embedded-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  11. Upgrade

    Upgrade redhat/mariadb-embedded-devel to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  12. Upgrade

    Upgrade redhat/mariadb-errmsg to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  13. Upgrade

    Upgrade redhat/mariadb-gssapi-server to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  14. Upgrade

    Upgrade redhat/mariadb-gssapi-server-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  15. Upgrade

    Upgrade redhat/mariadb-oqgraph-engine to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  16. Upgrade

    Upgrade redhat/mariadb-oqgraph-engine-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  17. Upgrade

    Upgrade redhat/mariadb-pam to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  18. Upgrade

    Upgrade redhat/mariadb-pam-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  19. Upgrade

    Upgrade redhat/mariadb-server to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  20. Upgrade

    Upgrade redhat/mariadb-server-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  21. Upgrade

    Upgrade redhat/mariadb-server-galera to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  22. Upgrade

    Upgrade redhat/mariadb-server-utils to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  23. Upgrade

    Upgrade redhat/mariadb-server-utils-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  24. Upgrade

    Upgrade redhat/mariadb-test to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  25. Upgrade

    Upgrade redhat/mariadb-test-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  26. Upgrade

    Upgrade redhat/mariadb10.11-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  27. Upgrade

    Upgrade redhat/mariadb10.11-debugsource to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0
  28. Upgrade

    Upgrade redhat/mariadb to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  29. Upgrade

    Upgrade redhat/mariadb-backup to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  30. Upgrade

    Upgrade redhat/mariadb-backup-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  31. Upgrade

    Upgrade redhat/mariadb-client-utils to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  32. Upgrade

    Upgrade redhat/mariadb-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  33. Upgrade

    Upgrade redhat/mariadb-devel to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  34. Upgrade

    Upgrade redhat/mariadb-embedded to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  35. Upgrade

    Upgrade redhat/mariadb-embedded-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  36. Upgrade

    Upgrade redhat/mariadb-embedded-devel to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  37. Upgrade

    Upgrade redhat/mariadb-gssapi-server to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  38. Upgrade

    Upgrade redhat/mariadb-gssapi-server-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  39. Upgrade

    Upgrade redhat/mariadb-oqgraph-engine to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  40. Upgrade

    Upgrade redhat/mariadb-oqgraph-engine-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  41. Upgrade

    Upgrade redhat/mariadb-pam to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  42. Upgrade

    Upgrade redhat/mariadb-pam-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  43. Upgrade

    Upgrade redhat/mariadb-server to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  44. Upgrade

    Upgrade redhat/mariadb-server-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  45. Upgrade

    Upgrade redhat/mariadb-server-galera to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  46. Upgrade

    Upgrade redhat/mariadb-server-utils to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  47. Upgrade

    Upgrade redhat/mariadb-server-utils-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  48. Upgrade

    Upgrade redhat/mariadb-test to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  49. Upgrade

    Upgrade redhat/mariadb-test-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  50. Upgrade

    Upgrade redhat/mariadb10.11-debuginfo to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  51. Upgrade

    Upgrade redhat/mariadb10.11-debugsource to a version that resolves this vulnerability.

    Fixed in 10.11.18-1.el10_0.aa
  52. Upgrade

    Upgrade mariadb to a version that resolves this vulnerability.

    Fixed in mariadb10.11
  53. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2026-44168
  54. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2026-48165
  55. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2026-48163
  56. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2026-44170
  57. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2026-44173
  58. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2026-44171
  59. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch CVE-2026-49261

Event History

Aug 3, 2026
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203