{"id":"CVE-2026-44169","aliases":["ALPINE-CVE-2026-44169","BELL-CVE-2026-44169","BIT-mariadb-2026-44169","BIT-mariadb-min-2026-44169","BIT-mysql-client-2026-44169","DEBIAN-CVE-2026-44169","EUVD-2026-36515","GHSA-22xq-vq3f-87x2","MGASA-2026-0235","RHSA-2026:25143","RHSA-2026:25145","RHSA-2026:33412","RHSA-2026:33481","RLSA-2026:33093","RLSA-2026:33412","RLSA-2026:33481","RLSA-2026:33482","ROOT-OS-DEBIAN-12-CVE-2026-44169","ROOT-OS-DEBIAN-13-CVE-2026-44169","SUSE-SU-2026:22095-1","SUSE-SU-2026:2330-1","UBUNTU-CVE-2026-44169","openSUSE-SU-2026:10897-1","openSUSE-SU-2026:20933-1"],"status":"published","title":"MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00237,"percentile":0.14891,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2026-05-26T11:41:58.648545Z","modified":"2026-10-28T02:30:51Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"mariadb","fixed_in":["10.11.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mariadb","fixed_in":["11.4.11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mariadb","fixed_in":["11.4.11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mariadb","fixed_in":["11.4.11-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mariadb","fixed_in":["11.8.7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"mariadb","fixed_in":["11.4.11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"mariadb","fixed_in":["11.8.7-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mariadb","fixed_in":["11.4.11","11.8.7","12.3.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mariadb-min","fixed_in":["11.4.11","11.8.7","12.3.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mysql-client","fixed_in":["11.4.11","11.8.7","12.3.2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mariadb","fixed_in":["1:11.8.8-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"mariadb","fixed_in":["1:10.11.19-0+deb12u1.aikido.11","1:10.11.19-0+deb12u1.aikido.12","1:10.11.19-0+deb12u1.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-mariadb","fixed_in":["1:10.11.19-0+deb12u1.aikido.11","1:10.11.19-0+deb12u1.aikido.12","1:10.11.19-0+deb12u1.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"mariadb","fixed_in":["1:11.8.6-0+deb13u1.aikido.7","1:11.8.6-0+deb13u1.aikido.8","1:11.8.6-0+deb13u1.root.io.6","1:11.8.6-0+deb13u1.aikido.9","1:11.8.6-0+deb13u1.aikido.10","1:11.8.6-0+deb13u1.aikido.11","1:11.8.6-0+deb13u1.aikido.12"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-mariadb","fixed_in":["1:11.8.6-0+deb13u1.aikido.7","1:11.8.6-0+deb13u1.aikido.8","1:11.8.6-0+deb13u1.root.io.6","1:11.8.6-0+deb13u1.aikido.9","1:11.8.6-0+deb13u1.aikido.10","1:11.8.6-0+deb13u1.aikido.11","1:11.8.6-0+deb13u1.aikido.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"mariadb","fixed_in":["1:11.8.6-5ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.4.1"},{"fixed":"10.11.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.4.1"},{"fixed":"11.4.11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.4.1"},{"fixed":"11.4.11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.4.1"},{"fixed":"11.4.11-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.4.1"},{"fixed":"11.8.7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.4.5-r0"},{"fixed":"11.4.11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.11.4-r0"},{"fixed":"11.8.7-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mariadb","ranges":[{"type":"SEMVER","events":[{"introduced":"11.4.1"},{"fixed":"11.4.11"},{"introduced":"11.8.1"},{"fixed":"11.8.7"},{"introduced":"12.3.1"},{"fixed":"12.3.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mariadb-min","ranges":[{"type":"SEMVER","events":[{"introduced":"11.4.1"},{"fixed":"11.4.11"},{"introduced":"11.8.1"},{"fixed":"11.8.7"},{"introduced":"12.3.1"},{"fixed":"12.3.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mysql-client","ranges":[{"type":"SEMVER","events":[{"introduced":"11.4.1"},{"fixed":"11.4.11"},{"introduced":"11.8.1"},{"fixed":"11.8.7"},{"introduced":"12.3.1"},{"fixed":"12.3.2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.11.11-0+deb12u1","1:10.11.13-0+deb12u1","1:10.11.14-0+deb12u1","1:10.11.14-0+deb12u2","1:10.11.18-0+deb12u1","1:10.11.19-0+deb12u1","1:10.11.3-1","1:10.11.3-2~exp1","1:10.11.4-1","1:10.11.4-1~deb12u1","1:10.11.5-1","1:10.11.5-2","1:10.11.5-3","1:10.11.6-0+deb12u1","1:10.11.6-1","1:10.11.6-2","1:10.11.6-2.1~exp1","1:10.11.7-1","1:10.11.7-2","1:10.11.7-3","1:10.11.7-4","1:10.11.8-1","1:10.11.9-0+deb12u1","1:11.4.2-1","1:11.4.2-2","1:11.4.2-3","1:11.4.2-4","1:11.4.3-1","1:11.4.4-1","1:11.4.4-2","1:11.4.4-3","1:11.4.5-1","1:11.4.5-2~exp1","1:11.8.1-1","1:11.8.1-2","1:11.8.1-3","1:11.8.1-4","1:11.8.1-5","1:11.8.2-1","1:11.8.3-1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-3~exp1","1:11.8.5-3~exp2","1:11.8.5-3~exp3","1:11.8.5-4","1:11.8.6-1","1:11.8.6-2","1:11.8.6-3","1:11.8.6-4","1:11.8.6-5","1:11.8.6-6","1:11.8.8-1","1:11.8.9+ds-1","1:11.8.9+ds-2","1:11.8.9+ds-3","1:11.8.9+ds-4"]},{"source":"osv","ecosystem":"Debian:13","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:11.8.2-1","1:11.8.3-0+deb13u1","1:11.8.3-1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-3~exp1","1:11.8.5-3~exp2","1:11.8.5-3~exp3","1:11.8.5-4","1:11.8.6-0+deb13u1","1:11.8.6-1","1:11.8.6-2","1:11.8.6-3","1:11.8.6-4","1:11.8.6-5","1:11.8.6-6","1:11.8.8-0+deb13u1","1:11.8.8-1","1:11.8.9+ds-1","1:11.8.9+ds-2","1:11.8.9+ds-3","1:11.8.9+ds-4"]},{"source":"osv","ecosystem":"Debian:14","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.8-1"}]}],"versions":["1:11.8.2-1","1:11.8.3-1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-3~exp1","1:11.8.5-3~exp2","1:11.8.5-3~exp3","1:11.8.5-4","1:11.8.6-1","1:11.8.6-2","1:11.8.6-3","1:11.8.6-4","1:11.8.6-5","1:11.8.6-6"]},{"source":"osv","ecosystem":"Mageia:10","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.2-1.mga10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-client-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-connect-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-cracklib-password-check","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-gssapi-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-oqgraph-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-rocksdb-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-s3-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-server-galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-server-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-sphinx-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-client-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-connect-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-cracklib-password-check","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-gssapi-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-oqgraph-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-rocksdb-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-s3-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-server-galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-server-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-sphinx-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-backup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-client-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-gssapi-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-gssapi-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-oqgraph-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-oqgraph-engine-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-galera-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.27-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"galera-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.27-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"galera-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.27-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-backup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-client-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-gssapi-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-gssapi-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-oqgraph-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-oqgraph-engine-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-galera-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+24389+c97c30be"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:10","package":"mariadb10.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.11.18-1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:10","package":"galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.27-1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.27-1.module+el9.8.0+40229+87be66a2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.27-1.module+el9.8.0+40232+a354f53a"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.8-1.module+el9.8.0+40229+87be66a2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.27-1.module+el9.8.0+40229+87be66a2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.27-1.module+el9.8.0+40232+a354f53a"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.11.18-1.module+el9.8.0+40232+a354f53a"}]}],"bundled":9},{"source":"osv","ecosystem":"Root:Debian:12","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.11.19-0+deb12u1.aikido.11"},{"fixed":"1:10.11.19-0+deb12u1.aikido.12"},{"fixed":"1:10.11.19-0+deb12u1.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.11.19-0+deb12u1.aikido.11"},{"fixed":"1:10.11.19-0+deb12u1.aikido.12"},{"fixed":"1:10.11.19-0+deb12u1.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.6-0+deb13u1.aikido.7"},{"fixed":"1:11.8.6-0+deb13u1.aikido.8"},{"fixed":"1:11.8.6-0+deb13u1.root.io.6"},{"fixed":"1:11.8.6-0+deb13u1.aikido.9"},{"fixed":"1:11.8.6-0+deb13u1.aikido.10"},{"fixed":"1:11.8.6-0+deb13u1.aikido.11"},{"fixed":"1:11.8.6-0+deb13u1.aikido.12"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.6-0+deb13u1.aikido.7"},{"fixed":"1:11.8.6-0+deb13u1.aikido.8"},{"fixed":"1:11.8.6-0+deb13u1.root.io.6"},{"fixed":"1:11.8.6-0+deb13u1.aikido.9"},{"fixed":"1:11.8.6-0+deb13u1.aikido.10"},{"fixed":"1:11.8.6-0+deb13u1.aikido.11"},{"fixed":"1:11.8.6-0+deb13u1.aikido.12"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.8-160000.1.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.8-160000.1.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.8-150700.3.15.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.8-150700.3.15.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mariadb-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.0.20-0ubuntu0.15.04.1","10.0.22-0ubuntu1","10.0.23-1","10.0.23-2","10.0.24-7","10.0.25-0ubuntu0.16.04.1","10.0.27-0ubuntu0.16.04.1","10.0.28-0ubuntu0.16.04.1","10.0.29-0ubuntu0.16.04.1","10.0.31-0ubuntu0.16.04.2","10.0.33-0ubuntu0.16.04.1","10.0.34-0ubuntu0.16.04.1","10.0.36-0ubuntu0.16.04.1","10.0.38-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mariadb-10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.1.25-1","1:10.1.29-6","1:10.1.34-0ubuntu0.18.04.1","1:10.1.38-0ubuntu0.18.04.1","1:10.1.38-0ubuntu0.18.04.2","1:10.1.40-0ubuntu0.18.04.1","1:10.1.41-0ubuntu0.18.04.1","1:10.1.43-0ubuntu0.18.04.1","1:10.1.44-0ubuntu0.18.04.1","1:10.1.47-0ubuntu0.18.04.1","1:10.1.48-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mariadb-10.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.3.17-1","1:10.3.18-1","1:10.3.19-1","1:10.3.21-2","1:10.3.22-1","1:10.3.22-1ubuntu1","1:10.3.25-0ubuntu0.20.04.1","1:10.3.29-0ubuntu0.20.04.1","1:10.3.30-0ubuntu0.20.04.1","1:10.3.31-0ubuntu0.20.04.1","1:10.3.32-0ubuntu0.20.04.1","1:10.3.34-0ubuntu0.20.04.1","1:10.3.37-0ubuntu0.20.04.1","1:10.3.38-0ubuntu0.20.04.1","1:10.3.39-0ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mariadb-10.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.6.7-2ubuntu1","1:10.6.7-2ubuntu1.1","1:10.6.11-0ubuntu0.22.04.1","1:10.6.12-0ubuntu0.22.04.1","1:10.6.16-0ubuntu0.22.04.1","1:10.6.18-0ubuntu0.22.04.1","1:10.6.21-0ubuntu0.22.04.2","1:10.6.22-0ubuntu0.22.04.1","1:10.6.23-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.11.4-1","1:10.11.5-3","1:10.11.6-1","1:10.11.6-2","1:10.11.7-2ubuntu1","1:10.11.7-2ubuntu2","1:10.11.8-0ubuntu0.24.04.1","1:10.11.11-0ubuntu0.24.04.2","1:10.11.13-0ubuntu0.24.04.1","1:10.11.14-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:11.4.5-1","1:11.8.1-4","1:11.8.1-5ubuntu2","1:11.8.2-1ubuntu1","1:11.8.3-1","1:11.8.3-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.6-5ubuntu0.1"}]}],"versions":["1:11.8.3-1build1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-4","1:11.8.6-1","1:11.8.6-3","1:11.8.6-4","1:11.8.6-5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.7-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.8-160000.1.1"}]}],"bundled":12}],"products":[{"vendor":"devolutions","product":"server"},{"vendor":"mariadb","product":"mariadb"},{"vendor":"mariadb","product":"server"}],"references":[{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-22xq-vq3f-87x2","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","article"]},{"url":"https://jira.mariadb.org/browse/MDEV-39288","tags":["x_refsource_MISC","Issue Tracking","report","web","article"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-44169","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-44169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44169","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44169.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-44169","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0235.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35675","tags":["report"]},{"url":"https://mariadb.com/docs/release-notes/community-server/12.3/12.3.2","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25143","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49261","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44169","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44432","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44168","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44171","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44170","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48163","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48165","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44173","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25143.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488450","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44168","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44168","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-vwf7-w26c-9w5h","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-39413","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44169","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44170","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44170","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-f835-cfjq-wf73","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-39289","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488453","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44171","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-9pjh-5hhw-65v9","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-39408","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488460","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44173","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-667j-m53j-wpmc","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-39493","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477154","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44432","tags":["advisory"]},{"url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48163","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-rpgv-q6gv-684r","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-39648","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488458","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48165","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48165","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-7v3p-h23x-8hwv","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-39676","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487957","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49261","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-3p3m-4x7c-p4pw","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-39721","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25145","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25145.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:33412","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-183084","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-183259","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33412.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:33481","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-140364","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-183085","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33481.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:33093","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488459","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2026:33412","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:33481","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:33482","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622095-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259176","tags":["report"]},{"url":"https://bugzilla.suse.com/1261413","tags":["report"]},{"url":"https://bugzilla.suse.com/1266435","tags":["report"]},{"url":"https://bugzilla.suse.com/1266437","tags":["report"]},{"url":"https://bugzilla.suse.com/1266438","tags":["report"]},{"url":"https://bugzilla.suse.com/1266439","tags":["report"]},{"url":"https://bugzilla.suse.com/1266440","tags":["report"]},{"url":"https://bugzilla.suse.com/1266441","tags":["report"]},{"url":"https://bugzilla.suse.com/1266442","tags":["report"]},{"url":"https://bugzilla.suse.com/1266814","tags":["report"]},{"url":"https://bugzilla.suse.com/1266815","tags":["report"]},{"url":"https://bugzilla.suse.com/1267542","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49261","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262330-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-44169","tags":["report"]},{"url":"https://mariadb.com/docs/release-notes/community-server/11.8/11.8.7","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8536-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-44169","title":"MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","status":"published","published":"2026-06-12T17:31:53.344Z","modified":"2026-06-13T03:24:46.192Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T13:42:49.132798Z"}],"euvd":[{"id":"EUVD-2026-36515","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","status":"published","published":"2026-06-12T17:31:53Z","modified":"2026-06-13T03:24:46Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:43.222Z"}],"nvd":[{"id":"CVE-2026-44169","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","status":"published","published":"2026-06-12T18:16:33.713Z","modified":"2026-10-26T11:10:00.157Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:12:23.846948Z"}],"osv":[{"id":"ALPINE-CVE-2026-44169","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","status":"published","published":"2026-06-12T18:16:33.713Z","modified":"2026-10-01T02:17:49.304930437Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-44169","status":"published","published":"2026-05-26T11:41:58.648545Z","modified":"2026-06-16T07:15:06.479565628Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:24.12174Z"},{"id":"CVE-2026-44169","title":"MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","status":"published","published":"2026-06-12T17:31:53.344Z","modified":"2026-11-06T12:11:53.995887189Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-06T12:43:08.762989Z"},{"id":"DEBIAN-CVE-2026-44169","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","status":"published","published":"2026-06-12T18:16:33.713Z","modified":"2026-10-27T10:01:26.692939073Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:55.669088Z"},{"id":"RHSA-2026:25143","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-06-19T10:06:23Z","modified":"2026-10-16T10:14:01Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:25145","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-06-25T10:41:09Z","modified":"2026-10-09T10:23:29Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:33412","title":"Red Hat Security Advisory: galera and mariadb11.8 security, bug fix, and enhancement update","status":"published","published":"2026-06-30T10:49:47Z","modified":"2026-08-12T10:12:19Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:33481","title":"Red Hat Security Advisory: mariadb:11.8 security, bug fix, and enhancement update","status":"published","published":"2026-07-01T10:19:33Z","modified":"2026-08-12T10:12:21Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RLSA-2026:33093","title":"Important: mariadb10.11 security, bug fix, and enhancement update","description":"MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.\n\nSecurity Fix(es):\n\n* mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)\n\nBug Fix(es) and Enhancement(s):\n\n* Rebase MariaDB 10.11 to 10.11.18 in Rocky Linux10 (JIRA:Rocky Linux-183086)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-05T12:05:09.130757Z","modified":"2026-07-05T12:30:04.589793649Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:33412","title":"Important: galera and mariadb11.8 security, bug fix, and enhancement update","description":"MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.\n\nSecurity Fix(es):\n\n* mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)\n\nBug Fix(es) and Enhancement(s):\n\n* Rebase MariaDB 11.8 to 11.8.8 in Rocky Linux10 (JIRA:Rocky Linux-183084)\n\n* Rebase Galera to 26.4.27 in Rocky Linux10 (JIRA:Rocky Linux-183259)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-05T12:05:09.130757Z","modified":"2026-07-05T12:30:05.982227027Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:33481","title":"Important: mariadb:11.8 security, bug fix, and enhancement update","description":"MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. \n\nSecurity Fix(es):\n\n* mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)\n\nBug Fix(es) and Enhancement(s):\n\n* [Rocky Linux9] [tracker] Rebase Galera to 26.4.27 MariaDB:11.8 (JIRA:Rocky Linux-140364)\n\n* Rebase MariaDB 11.8 to 11.8.8 in Rocky Linux9 (JIRA:Rocky Linux-183085)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-05T12:03:16.627983Z","modified":"2026-07-05T12:30:04.619014515Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:33482","title":"Important: mariadb:10.11 security, bug fix, and enhancement update","description":"MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. \n\nSecurity Fix(es):\n\n* mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)\n\nBug Fix(es) and Enhancement(s):\n\n* [Rocky Linux9][tracker] Rebase Galera to 26.4.27 MariaDB:10.11 (JIRA:Rocky Linux-140363)\n\n* Rebase MariaDB 10.11 to 10.11.18 in Rocky Linux9 (JIRA:Rocky Linux-183087)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-05T12:03:16.627983Z","modified":"2026-07-05T12:30:05.953840142Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-44169","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","status":"published","published":"2026-06-12T18:16:00Z","modified":"2026-07-14T23:30:21.072500045Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:22.075798Z"},{"id":"BIT-mariadb-2026-44169","title":"MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","status":"published","published":"2026-06-16T11:46:56.545Z","modified":"2026-09-08T08:48:24.071828481Z","updated_at":"2026-11-02T15:28:32.645004Z"},{"id":"BIT-mariadb-min-2026-44169","title":"MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","status":"published","published":"2026-06-16T11:47:06.438Z","modified":"2026-09-08T08:48:12.633140405Z","updated_at":"2026-11-02T15:28:32.645004Z"},{"id":"BIT-mysql-client-2026-44169","title":"MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions","description":"MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.","status":"published","published":"2026-06-16T11:50:05.322Z","modified":"2026-09-08T08:48:24.286937905Z","updated_at":"2026-11-02T15:28:33.469426Z"},{"id":"MGASA-2026-0235","title":"Updated mariadb packages fix security vulnerabilities","description":"This update to the latest LTS version fixes some severe security\nvulnerabilities.\n","status":"published","published":"2026-07-04T22:28:06Z","modified":"2026-07-04T22:30:04.783038728Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:10897-1","title":"libmariadbd-devel-11.8.7-1.1 on GA media","description":"These are all security issues fixed in the libmariadbd-devel-11.8.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-29T00:00:00Z","modified":"2026-05-30T23:15:07.808820708Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:20933-1","title":"Security update for mariadb","description":"This update for mariadb fixes the following issues\n\nUpdate to 11.8.8:\n\n- CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).\n- CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).\n- CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413).\n- CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).\n- CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions\n  (bsc#1266441).\n- CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).\n- CVE-2026-44171: path traversal in mbstream (bsc#1266439).\n- CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).\n- CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).\n- CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).\n- CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814).\n- CVE-2026-49261: unsafe parameter handing in `wsrep_notify_cmd` (bsc#1267542).\n\n https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8\n https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8\n","status":"published","published":"2026-06-10T10:57:17Z","modified":"2026-06-13T18:24:18.776064673Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-44169","title":"CVE-2026-44169 in mariadb - Patched by Root","description":"Root has patched CVE-2026-44169 in the mariadb package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-10-22T10:39:02Z","modified":"2026-10-22T11:15:03.43528308Z","updated_at":"2026-11-02T15:53:32.037361Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-44169","title":"CVE-2026-44169 in mariadb - Patched by Root","description":"Root has patched CVE-2026-44169 in the mariadb package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-10-22T12:36:03Z","modified":"2026-10-22T13:15:06.928109327Z","updated_at":"2026-11-02T15:53:33.681527Z"},{"id":"SUSE-SU-2026:22095-1","title":"Security update for mariadb","description":"This update for mariadb fixes the following issues\n\nUpdate to 11.8.8:\n\n- CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).\n- CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).\n- CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413).\n- CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).\n- CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions\n  (bsc#1266441).\n- CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).\n- CVE-2026-44171: path traversal in mbstream (bsc#1266439).\n- CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).\n- CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).\n- CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).\n- CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814).\n- CVE-2026-49261: unsafe parameter handing in `wsrep_notify_cmd` (bsc#1267542).\n\n https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8\n https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8\n","status":"published","published":"2026-06-10T09:53:24Z","modified":"2026-06-16T18:24:40.652960657Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2330-1","title":"Security update for mariadb","description":"This update for mariadb fixes the following issues:\n\n- CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).\n- CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).\n- CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413).\n- CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).\n- CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions\n  (bsc#1266441).\n- CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).\n- CVE-2026-44171: path traversal in mbstream (bsc#1266439).\n- CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).\n- CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).\n- CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).\n- CVE-2026-48165: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (bsc#1266814).\n- CVE-2026-49261: unsafe parameter handling in `wsrep_notify_cmd` (bsc#1267542).\n\nChanges for mariadb:\n\n- Update to 11.8.8:\n https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8\n https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8\n- Update to 11.8.7:\n https://mariadb.com/docs/release-notes/community-server/11.8/11.8.7\n https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.7\n","status":"published","published":"2026-06-10T07:39:58Z","modified":"2026-06-10T16:15:23.544956092Z","updated_at":"2026-11-02T15:54:03.503431Z"}]}}