Linux · Security advisory · January 6, 2026

ALSA-2026:0136: Security update for 2 packages

ALSA-2026:0136, released January 6, 2026, fixes 8 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0127
70th percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 7 Routine 1

Fixed package versions

ProductReleaseFixed in
mariadb-commonalmalinux 103:10.11.15-1.el10_1
mariadb-errmsgalmalinux 103:10.11.15-1.el10_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-21490 libmariadb3: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) 7.5 0.0127 None reported
High CVE-2025-30693 mariadb10.11: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) 7.0 0.0098 None reported
High CVE-2025-13699 mariadb: This update for mariadb fixes the following issues: - CVE-2025-13699: Fixed MariaDB mariadb-dump utility vulnerable... 7.0 0.0052 None reported
High CVE-2023-52971 MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan. 7.0 0.0050 None reported
High CVE-2025-30722 mariadb10.11: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump) 7.0 0.0050 None reported
High CVE-2023-52969 mariadb: This update for mariadb fixes the following issues: Update to version 10.11.14. Security issues fixed: - CVE-2025-... 7.0 0.0047 None reported
High CVE-2023-52970 mariadb: This update for mariadb fixes the following issues: Update to version 10.11.14. Security issues fixed: - CVE-2025-... 7.0 0.0046 None reported
Routine CVE-2026-21968 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 6.5 0.0031 None reported
Showing 1 to 8 of 8 1