MariaDB 10.6.0 < 10.6.24

The version of MariaDB installed on the remote host is prior to 10.6.24. It is, therefore, affected by a vulnerability as referenced in the 10.6.24 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are...

MariaDB 10.11.0 < 10.11.15

The version of MariaDB installed on the remote host is prior to 10.11.15. It is, therefore, affected by a vulnerability as referenced in the 10.11.15 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are...

MariaDB 11.4.0 < 11.4.9

The version of MariaDB installed on the remote host is prior to 11.4.9. It is, therefore, affected by a vulnerability as referenced in the 11.4.9 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are...

MariaDB 11.8.0 < 11.8.4

The version of MariaDB installed on the remote host is prior to 11.8.4. It is, therefore, affected by a vulnerability as referenced in the 11.8.4 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are...

MariaDB 12.1.0 < 12.1.2

The version of MariaDB installed on the remote host is prior to 12.1.2. It is, therefore, affected by a vulnerability as referenced in the 12.1.2 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator-fips, cert-manager-istio-csr, opentelemetry-operator-fips, gitlab-operator, cert-manager-csi-driver, cert-manager-openshift-routes-fips, cert-manager-webhook-pdns-fips, step-issuer-fips, cert-manager-google-cas-issuer,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, aws-privateca-issuer, mariadb-operator, cert-manager-istio-csr, cert-manager-csi-driver, opentelemetry-operator, percona-server-mongodb-operator, cert-manager-cmctl, step-issuer...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, aws-privateca-issuer, mariadb-operator, cert-manager-istio-csr, cert-manager-csi-driver, opentelemetry-operator, percona-server-mongodb-operator, cert-manager-cmctl, step-issuer...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator-fips, cert-manager-istio-csr, opentelemetry-operator-fips, gitlab-operator, cert-manager-csi-driver, cert-manager-openshift-routes-fips, cert-manager-webhook-pdns-fips, step-issuer-fips, cert-manager-google-cas-issuer,...

ROS-20260129-73-0058

Vulnerability in mariadb11.8 related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0057

Vulnerability in mariadb11.4 related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0055

Vulnerability in mariadb related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

Oracle Linux 7 : mariadb (ELSA-2026-0367)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0367 advisory. - Fixes CVE-2025-13699, remote code execution via improper path validation Orabug: 38829265 Tenable has extracted the preceding description block directly from...

Astra Linux – Vulnerability in MariaDB

MariaDB Server versions 10.10 through 10.11. and 11.0 through 11.4. crash when executing JOIN::fixallsplittingsinplan...

Astra Linux – Vulnerability in MariaDB

MariaDB Server versions 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4. crash when using Itemdirectviewref::derivedfieldtransformerforwhere...

Astra Linux – Vulnerability in MariaDB

MariaDB Server versions 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. may sometimes crash when the backtrace log is empty. This may be related to the makeaggrtablesinfo and optimizestage2 functions...

CLSA-2026-1769162597 mariadb: Fix of CVE-2025-13699

timezone-test-to-cet: change the timezone to CET to fix the test failure - CVE-2025-13699: fix directory traversal...

CLSA-2026-1769084608 mariadb: Fix of 5 CVEs

Updated to the 10.5.29 tarball - CVE-2025-30722: fix mariadb-dump wrong quoting character by using ' not " and using quoteforequal - CVE-2025-30693: fix incorrect undo logging for indexes on virtual columns by properly encoding/decoding large index IDs in InnoDB undo log records - CVE-2025-21490:...

[SECURITY] Fedora 42 Update: mariadb11.8-11.8.5-1.fc42

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

[SECURITY] Fedora 43 Update: mariadb11.8-11.8.5-1.fc43

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...