Back to Security Advisories
aarch64
mariadb-gssapi-server-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
0e0f17a9b86925377589a85db208a4c1c0208d3df0090f2a33acee19283b8457
aarch64
mariadb-backup-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
1709ab7ed769fda2f3e6f5048aa714b6bde2ee039ff132bcafbc398d18d20d36
aarch64
mariadb-errmsg-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
3f0473731ad847c4a910804b534d6be64660244a1e8d17f09c17247bd5b15a09
aarch64
galera-26.4.27-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
50e813b493151cf0aa2dfc9d0255fb91c5cc7f09550437bf8539896b40db930b
aarch64
mariadb-common-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
53961c80ec4bed1997048f916a2c3b107b9ec1e4aaac78b8f55be6c08453f6eb
aarch64
mariadb-server-utils-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
601136bee2f436a927c5c30c70adaab5310757fb7041f2202842f879145db4c2
aarch64
mariadb-server-galera-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
635541f9e3c3c80c89031fffc74c1b28fdf9b563c3a38e816db5cee3e2566db2
aarch64
mariadb-devel-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
6dca8691c9f7a6f75549c61280d4b1ae2eb054451bf916e77b06084dbd9db271
aarch64
mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
70fd7227590d5b82b9a001f511f0c171a4f1264c931f789a1d492b3a1e2184e3
aarch64
mariadb-embedded-devel-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
8a135418d8952843cf139c148be016a1f86614a90f9c6897fc1b58b402d6029e
aarch64
mariadb-embedded-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
bad32cae7479e9fd8546e9ab4e9f37999bd8c432400480d5c6bc7e5e7ff553ae
aarch64
mariadb-test-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
d3e486089d1fdb2770e81f58cc911a393eecdef104607981fa2bba73b9207a6a
aarch64
Judy-1.0.5-18.module_el8.10.0+3794+c6a66d65.aarch64.rpm
d3e9dcfb026c6e4d390bfd5b58717e86923d657dca4cfd8bcb8066274c02d88e
aarch64
mariadb-oqgraph-engine-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
f2b800e6c3ca3e722cfe830f494a7b735f785b8a23fd834c4a8b21314645537a
aarch64
mariadb-server-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
f3fd2405863e3c7ca2e3fe1113c0a6b5255b43738ced51c12402f7192f7792a9
aarch64
mariadb-pam-10.11.18-1.module_el8.10.0+4207+a44b0e1e.aarch64.rpm
f4dabfb129b0a207fb736915d0ff06f6098c453636b52a7046f76dd1972a6cc7
ppc64le
mariadb-test-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
0f952446d0af56136748311ca68fb07ab52e5aa92f969b275f6b6b8df2aa50af
ppc64le
mariadb-common-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
1697e5d088175ad560282688c06083d8c423521f9f3e5c64f168c637c21a7b3b
ppc64le
mariadb-embedded-devel-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
1e9bb361e91037db05c18bfbef212c07a1060f895d0a37ab63c56b4538681f4a
ppc64le
mariadb-pam-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
32988264245bfc68f60213b6a6e618543e63ebda4fd1466c6bda539b68872531
ppc64le
mariadb-oqgraph-engine-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
4b76075a52412bb538b676817605d3dfcaaa37ca68688d7986a9d8fe878de12a
ppc64le
mariadb-server-galera-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
5e14ae479913bbb9e7c71a07c185dfbc8e0863706c153d0becf4348f194429ea
ppc64le
mariadb-gssapi-server-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
63a5ada645efae21ca77c8b2507b22d8f4da5856947834a315a4282bc4f19247
ppc64le
mariadb-server-utils-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
9d47beb3495cde0e4d412ff702216d34442dae1cc1436090c67bf58a86ba09b3
ppc64le
mariadb-devel-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
ab44765d695454d474eb3e448a3fc5042cb5b38aa67e8ace29536fdf26c8766e
ppc64le
galera-26.4.27-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
acbf59ac747105f14d1f8297244e1a1568761841f5cbe633052fba5bcd22159b
ppc64le
mariadb-backup-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
b8145dd886601b4a30096d4411fd70f27771e5f07d8170d14cadfa2a23131cee
ppc64le
mariadb-errmsg-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
beb72b5141bcc5783cf9604b22c1bed1f986cfd70ae1c2cb8bbd73d09765245c
ppc64le
mariadb-embedded-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
d6cabbe999f281cbc042daa7a402b763d0e7adde4e4458d577649ce68928accd
ppc64le
mariadb-server-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
eef524a8f2ca9102e98a3cdabcb24a5fab1c81833021529512702f79f851f076
ppc64le
Judy-1.0.5-18.module_el8.10.0+3955+6534edaf.ppc64le.rpm
f213c173fcc807b5780f015863951d61de0c2c4c30729209bc1fb46640808b02
ppc64le
mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.ppc64le.rpm
f5ac1ab88da301d1726d4f408dcb98a99ad963272d6573c3e6ab729de87a5e23
s390x
mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
00d97f1d33461ee5b60fdcc1dfd9d38379f1eda975f2383bea426bf204b89650
s390x
galera-26.4.27-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
0dccc0e52e179197100ca9a2e831a90cefdb0a4e7fab29c98f7920048e1e739a
s390x
mariadb-common-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
0dde2a902fc304c957e54ab25229716c3196b04232158e86f2c8c190555bd22d
s390x
mariadb-server-utils-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
112c717b813a6ef7be89e9e35f84d619e8d7572884a2073564691b73b996d556
s390x
mariadb-oqgraph-engine-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
14904c2eda9ce48c55eb7ea974bbb99dbc03b7634c91e4e0e029ff8238f01109
s390x
mariadb-embedded-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
20ae291ceba495a9ffaee92f1d9dab7da840c1f9fed742616e7b2a788166805e
s390x
mariadb-embedded-devel-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
270d4a72e02cbd1bdb2bfbf18bb05a0952a59d0f3b01cab2a05d5c20e2ad9be0
s390x
mariadb-test-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
4e812c3bbed68682f9a215e81e73c2cbe33b1d25066ddeee12780a2f4b2b1f42
s390x
mariadb-devel-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
78755bc6494a628820f58b100940d7d19b0cc4ff573a8f569aca8a156577ee9f
s390x
mariadb-server-galera-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
7e27d404374b32cc6703c32165394dfc1a6e675960042041bfbde0698e00dff9
s390x
mariadb-pam-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
97d830cdaf36fa6caecb11a84ea7c46c9e220855a802930d5e4da136cae1c591
s390x
Judy-1.0.5-18.module_el8.10.0+3955+6534edaf.s390x.rpm
99b62cdef6ceaba085de83cc984e6cbf05038bdb656233ab329acb0253ef0e8b
s390x
mariadb-backup-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
a1911a5d8a15d10f73ae1e17570199bc62ec592d749608c2e5c47d6c3ace3ef5
s390x
mariadb-gssapi-server-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
a455bd8c0a492bc6cef3de3637553bf0cf77c083d312946249d232c9db012bf2
s390x
mariadb-errmsg-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
af36b383f7bb929b45acdcaa903ad19794d284729eb90fd3d6b314546fd51f3c
s390x
mariadb-server-10.11.18-1.module_el8.10.0+4207+a44b0e1e.s390x.rpm
bbfb3244f07ef0515ee15f137e440eeada32a86c96f30e7852772fecab37756d
x86_64
mariadb-errmsg-10.11.18-1.module_el8.10.0+4207+a44b0e1e.x86_64.rpm
2e246c9febaeb866cb24e1143209e4fc221adc70a932dfcfe64f7b20693e88fc
x86_64
mariadb-test-10.11.18-1.module_el8.10.0+4207+a44b0e1e.x86_64.rpm
3855d4332968f679f5384741344f544a8b2c301a17a78b1e385a2d95b1e6d83d
x86_64
mariadb-gssapi-server-10.11.18-1.module_el8.10.0+4207+a44b0e1e.x86_64.rpm
398b28fd74afdc569dcfc0b632424f3ff2a94dae6411036e9bfa690da5b641ad
x86_64
mariadb-10.11.18-1.module_el8.10.0+4207+a44b0e1e.x86_64.rpm
46262660bb79d61c2fe5b09075f3779073e522b33fde41142a96a3432507f986
x86_64
mariadb-embedded-devel-10.11.18-1.module_el8.10.0+4207+a44b0e1e.x86_64.rpm
517c5a59263c12ccf310e1bd971fe3af8ceab05962de9569eb1171bcac564377
x86_64
Judy-1.0.5-18.module_el8.10.0+3794+c6a66d65.x86_64.rpm
7b3d74ef97a3e21eb0c4704dfaa82d6646a3d59e8fba359ef407fcafedb7bc2b
x86_64
mariadb-server-10.11.18-1.module_el8.10.0+4207+a44b0e1e.x86_64.rpm
7c1a6b779f20b96251a3476b39484010c33acc63ab0778893933806e0995c854
x86_64
mariadb-server-galera-10.11.18-1.module_el8.10.0+4207+a44b0e1e.x86_64.rpm
7d707d7232daba59b280f19e6535f888eeb0fd53877c0fc8f942610b302c70fa
x86_64
mariadb-devel-10.11.18-1.module_el8.10.0+4207+a44b0e1e.x86_64.rpm
8a7682f6fbd33daf4e71bbfdba8ec7affebc0d6c00577d7ab30b009048b7d875
x86_64
galera-26.4.27-1.module_el8.10.0+4207+a44b0e1e.x86_64.rpm
8ff0f61e36d0d870baeb3db319cb85d209331afa9578be4c1a90a597a2d67d38
Mariadb:10.11 Security Update — AlmaLinux 8 (ALSA-2026:33464)
ALSA-2026:33464 fixes CVE-2026-49261 in the AlmaLinux 8 mariadb:10.11 module — arbitrary code execution via wsrep_notify_cmd, rated CVSS 10. The wsrep notification command is used in Galera cluster setups, so any MariaDB 10.11 server before 10.11.18 participating in a cluster is exposed. Update the module to 10.11.18 (dnf update on the mariadb:10.11 module stream) and restart MariaDB.
Critical
10 CVSS
AlmaLinux 8
Affected Versions
10.11
What this means under a SharedLicense license
Code execution in the database server means full access to every database it hosts — on shared hosting, that is every customer's data at once, plus a pivot point into the rest of the server.
Frequently Asked Questions
What is CVE-2026-49261?
It is a flaw in MariaDB Server allowing arbitrary code execution via wsrep_notify_cmd — the command hook used by Galera cluster notification. AlmaLinux rates the fix Important with a CVSS of 10, and it is fixed in the mariadb:10.11 module at 10.11.18.
Which MariaDB versions are affected?
MariaDB 10.11 servers in the AlmaLinux 8 mariadb:10.11 module stream before 10.11.18. The practical exposure concentrates on Galera-cluster setups where wsrep notification is configured — standalone servers should still update, as the module refresh also carries the Galera 26.4.27 and gssapi/backup package updates.
How do I apply the fix?
Update the module stream: dnf update mariadb* (within the mariadb:10.11 module) or use the panel's database updater, then restart MariaDB and confirm the version reports 10.11.18. Take a database backup before updating, as with any database upgrade.
Am I affected if I do not use Galera?
The wsrep_notify_cmd execution path is cluster-related, so standalone servers are the lower-risk case — but AlmaLinux ships the fix for all installations of the module. Update regardless: it also brings the module to the current Galera and package set.
References
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System