Linux · Security advisory · April 2, 2026

ELSA-2026-6435: Security update for 16 packages

ELSA-2026-6435, released April 2, 2026, fixes 2 CVEs across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0050
42nd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
Judyol 80:1.0.5-18.module+el8.10.0+90753+7c7ea859
galeraol 80:26.4.23-1.module+el8.10.0+90861+51dde83f
mariadbol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-backupol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-commonol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-develol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-embeddedol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-embedded-develol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-errmsgol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-gssapi-serverol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-oqgraph-engineol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-pamol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-serverol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-server-galeraol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-server-utilsol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-testol 83:10.11.15-1.module+el8.10.0+90861+51dde83f

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-52971 MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan. 7.0 0.0050 None reported
Routine CVE-2026-21968 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 6.5 0.0031 None reported
Showing 1 to 2 of 2 1