p PatchFirst

RLSA-2026:33412

RLSA-2026:33412 · Important: galera and mariadb11.8 security, bug fix, and enhancement update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es): * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261) Bug Fix(es) and Enhancement(s): * Rebase MariaDB 11.8 to 11.8.8 in Rocky Linux10 (JIRA:Rocky Linux-183084) * Rebase Galera to 26.4.27 in Rocky Linux10 (JIRA:Rocky Linux-183259) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 9.9 · Critical · Fix available

Published
Updated

Stack: system

Affected products and versions

  • galera Rocky Linux:10

    Affected ranges
    • ECOSYSTEM: < 0:26.4.27-1.el10_2

    Update to 0:26.4.27-1.el10_2

Original sources

Check your server →