Linux · Security advisory · January 9, 2026

ELSA-2026-0247: Security update for 15 packages

ELSA-2026-0247, released January 9, 2026, fixes 2 CVEs across 15 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0052
44th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
galeraol 90:26.4.20-1.0.1.module+el9.5.0+90507+82ceef20
mariadbol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-backupol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-commonol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-develol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-embeddedol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-embedded-develol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-errmsgol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-gssapi-serverol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-oqgraph-engineol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-pamol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-serverol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-server-galeraol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-server-utilsol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a
mariadb-testol 93:10.11.15-1.module+el9.7.0+90760+ea09f56a

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-13699 mariadb: This update for mariadb fixes the following issues: - CVE-2025-13699: Fixed MariaDB mariadb-dump utility vulnerable... 7.0 0.0052 None reported
High CVE-2023-52971 MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan. 7.0 0.0050 None reported
Showing 1 to 2 of 2 1