Red Hat Product Errata RHSA-2026:49522 - Security Advisory Issued: 2026-08-03 Updated: 2026-08-03 RHSA-2026:49522 - Security Advisory Overview Updated Packages Synopsis Important: mariadb10.11 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for mariadb10.11 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es): mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261) mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer (CVE-2026-44168) mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine (CVE-2026-44170) mariadb: mbstream: Unauthorized file creation via path traversal (CVE-2026-44171) mariadb: Arbitrary code execution via improper parameter validation during SST (CVE-2026-48163) mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user (CVE-2026-48165) mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries (CVE-2026-44173) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2487957 - CVE-2026-49261 mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd BZ - 2488450 - CVE-2026-44168 mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer BZ - 2488451 - CVE-2026-44170 mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine BZ - 2488453 - CVE-2026-44171 mariadb: mbstream: Unauthorized file creation via path traversal BZ - 2488454 - CVE-2026-48163 mariadb: Arbitrary code execution via improper parameter validation during SST BZ - 2488458 - CVE-2026-48165 mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user BZ - 2488460 - CVE-2026-44173 mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries CVEs CVE-2026-44168 CVE-2026-44170 CVE-2026-44171 CVE-2026-44173 CVE-2026-48163 CVE-2026-48165 CVE-2026-49261 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM mariadb10.11-10.11.18-1.el10_0.src.rpm SHA-256: 8d957dc1f6d9adc91311b6d9d9cc9eea26d117f7acd0ce2a2fd36bcf9fc575b1 x86_64 mariadb-10.11.18-1.el10_0.x86_64.rpm SHA-256: 9f53d67403ef2dd8769e0530ca7e64bc066a23f1b7ebf39ada9820304250833b mariadb-backup-10.11.18-1.el10_0.x86_64.rpm SHA-256: 0185fb305cbdc3fc901cf7f6929105d44938c9179480b864a9767bb6f19e287a mariadb-backup-debuginfo-10.11.18-1.el10_0.x86_64.rpm SHA-256: 4ab8ec18accd5894d329386357894f21c3f4482c35c02ddee391b10c62740ebd mariadb-client-utils-10.11.18-1.el10_0.x86_64.rpm SHA-256: 194631b964c18f85f626d1c9a50491967ce80475a0b77af478990442d0ab627e mariadb-common-10.11.18-1.el10_0.noarch.rpm SHA-256: 9ece2d048d52b44b98a74ce956c6f61e721577e3823213dc82428998fe9dc931 mariadb-debuginfo-10.11.18-1.el10_0.x86_64.rpm SHA-256: d37966d614414c2c527d4f4089464cfee19f4048ae13e70206437c4405b72978 mariadb-devel-10.11.18-1.el10_0.x86_64.rpm SHA-256: 665f9380eddda1676483a9fb9184bfe81270e3070d0a1afdd56be7d1a21c71de mariadb-embedded-10.11.18-1.el10_0.x86_64.rpm SHA-256: 1232f3aae16041b26d02ed47907f1946a59ad82fe08ebd80cf9a255325d2c7f1 mariadb-embedded-debuginfo-10.11.18-1.el10_0.x86_64.rpm SHA-256: 3ba2ffc25c5b69c3d00ea958e6d7ad214983505287ef19a4c8696128db66c70f mariadb-embedded-devel-10.11.18-1.el10_0.x86_64.rpm SHA-256: 40692dc43cf380fbd56a4483fe41a160a6f55f4d3246076003ddcde397ae9e6b mariadb-errmsg-10.11.18-1.el10_0.noarch.rpm SHA-256: 1adfb0fa76e548f88dfb38545895a209cbde95fdfa604ea123d05ad09d059661 mariadb-gssapi-server-10.11.18-1.el10_0.x86_64.rpm SHA-256: a55e5047942287a1ce0acffc05aa96cd45a4d253aa5f2f5e0207668f8820a63d mariadb-gssapi-server-debuginfo-10.11.18-1.el10_0.x86_64.rpm SHA-256: e1294d4d597ddc4d09cb89bfe38874b348489610111b0497b88c8b85dcf96fde mariadb-oqgraph-engine-10.11.18-1.el10_0.x86_64.rpm SHA-256: f048fe2969dd72cbed3c8b8b87d8aea82f73d391c5a80fcca97b24a0a665cf74 mariadb-oqgraph-engine-debuginfo-10.11.18-1.el10_0.x86_64.rpm SHA-256: 0bbdcde7fa2b7c32ac065cde05390ba6be992ac1d25ab9e4776ce53e78b4b709 mariadb-pam-10.11.18-1.el10_0.x86_64.rpm SHA-256: d949e07ee8f1e24b55b172ce6352bf2538b47e7d99fe14d8e856947dac8d0452 mariadb-pam-debuginfo-10.11.18-1.el10_0.x86_64.rpm SHA-256: fe853341da9969973d58bb574a6bd92c4ea42477cfe63ff9d8ece510151b6533 mariadb-server-10.11.18-1.el10_0.x86_64.rpm SHA-256: 8d83e1861f0dc5bac2d102aac5fef20676c02792371c6f024d1637d9552ad463 mariadb-server-debuginfo-10.11.18-1.el10_0.x86_64.rpm SHA-256: b03186702ea176331e32bb78e63e33f69399bfa42f39257ad068392916e87b13 mariadb-server-galera-10.11.18-1.el10_0.x86_64.rpm SHA-256: 5f77c52a2888b6c2c5c26e57e0d5a48ffb636c36f3b2c8cd61a4e0b3d0fab896 mariadb-server-utils-10.11.18-1.el10_0.x86_64.rpm SHA-256: 1a52480c2f6c172a2c32606df81f636b6e8c378118d51ef3727d433e6c1e9698 mariadb-server-utils-debuginfo-10.11.18-1.el10_0.x86_64.rpm SHA-256: f578bb04d5be8c726d0ad4f529655cdc0aabb286e95033b39e81ee7faee1e847 mariadb-test-10.11.18-1.el10_0.x86_64.rpm SHA-256: de2f929aec96fad0598b1c31b8c580c59d51880525bbe05a40f37a211b41cbe2 mariadb-test-debuginfo-10.11.18-1.el10_0.x86_64.rpm SHA-256: 160ec203e2e5037ab4b9658b35facdaba33289cfb38ba98f3a9f40d673c62461 mariadb10.11-debuginfo-10.11.18-1.el10_0.x86_64.rpm SHA-256: be4642e8e38ffd35922db8233ea116dbddb6ea1a3e0dcb40ab7478a8b689b488 mariadb10.11-debugsource-10.11.18-1.el10_0.x86_64.rpm SHA-256: 3e4256a686f6328e2c999776b6e57ceead5dfa324c7b4934357fa16b3869fd97 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM mariadb10.11-10.11.18-1.el10_0.src.rpm SHA-256: 8d957dc1f6d9adc91311b6d9d9cc9eea26d117f7acd0ce2a2fd36bcf9fc575b1 s390x mariadb-10.11.18-1.el10_0.s390x.rpm SHA-256: 3d62da44d75e15b4e34903b14f3c48012750e48e551db83540375e0f3c313c76 mariadb-backup-10.11.18-1.el10_0.s390x.rpm SHA-256: 198758739321f14f24c50a6b2bf1124cbe08dab20336d6f7df0a4781d4a9a8db mariadb-backup-debuginfo-10.11.18-1.el10_0.s390x.rpm SHA-256: 0f43ca5f533e1d803d5d9de1a3c87a0fe2de2a18f0d855ad63f127ac29aec95c mariadb-client-utils-10.11.18-1.el10_0.s390x.rpm SHA-256: 9294b224010d525e77fda9b92ec430c29b0dc57a17db17b644349e4e0e1034f9 mariadb-common-10.11.18-1.el10_0.noarch.rpm SHA-256: 9ece2d048d52b44b98a74ce956c6f61e721577e3823213dc82428998fe9dc931 mariadb-debuginfo-10.11.18-1.el10_0.s390x.rpm SHA-256: 52adba402968a502326690a1f8a66a45c98bab132bd9d7dee30b945188c020e6 mariadb-devel-10.11.18-1.el10_0.s390x.rpm SHA-256: dfb9ab3fd1808ce61c4a38250d3e68df03889bdb3fe05bd605a38d5634fb344f mariadb-embedded-10.11.18-1.el10_0.s390x.rpm SHA-256: bc05d8b25f8c1fb03a8f73f2452aaddf03a5d14ea0264559270e22829abe609e mariadb-embedded-debuginfo-10.11.18-1.el10_0.s390x.rpm SHA-256: cf9822814a96f48a34ea651938e43ebf5e469b182fd2395f0ce4b7b64ef92d17 mariadb-embedded-devel-10.11.18-1.el10_0.s390x.rpm SHA-256: 766e345648613737a518a4b3f87b1a621063210dcd5d2a8543bdb50de5217146 mariadb-errmsg-10.11.18-1.el10_0.noarch.rpm SHA-256: 1adfb0fa76e548f88dfb38545895a209cbde95fdfa604ea123d05ad09d059661 mariadb-gssapi-server-10.11.18-1.el10_0.s390x.rpm SHA-256: 30683bcc5d2a6166019b64a95543b7855b02ffc12875e8e19de0a58ad148b59e mariadb-gssapi-server-debuginfo-10.11.18-1.el10_0.s390x.rpm SHA-256: 558c77d86482956d16da261f586090bb8a47b55e42418933ffd7a74db71b1eb9 mariadb-oqgraph-engine-10.11.18-1.el10_0.s390x.rpm SHA-256: 462ab18f718627ff282665786460ef2048af720ac9851fa64cdc98dbdcae8949 mariadb-oqgraph-engine-debuginfo-10.11.18-1.el10_0.s390x.rpm SHA-256: d5df1913c75cf48bdb6765a83586d2ee83f655471fe5a5a809675baa13c97376 mariadb-pam-10.11.18-1.el10_0.s390x.rpm SHA-256: e46210faa2d5ff7b59be4527ad64c33b46c156b98f744a3d9a20a6b649f07695 mariadb-pam-debuginfo-10.11.18-1.el10_0.s390x.rpm SHA-256: afa208176065bc2e50a67f79eca40491a2b0a2b875e0ab8d4eaa99f14db6e29a mariadb-server-10.11.18-1.el10_0.s390x.rpm SHA-256: ecc7ab1f61f466cd816a35f9d3557bda331c154465c9e12cc0a4eab0abbd6a40 mariadb-server-debuginfo-10.11.18-1.el10_0.s390x.rpm SHA-256: a9ea4bab76b14b032e00f00d8c41a27a5c2c3b633ab96f3d28df00a0f79d07c5 mariadb-server-galera-10.11.18-1.el10_0.s390x.rpm SHA-256: 883dfc5a8e0a1b8ad6e4dd6acc0a8e995e385a5868c074ea60330b773f01fff9 mariadb-server-utils-10.11.18-1.el10_0.s390x.rpm SHA-256: 0482cc98bbaef60a1cd81e78646449