Linux · Security advisory · July 5, 2026

RLSA-2026:33093: mariadb10.11 security update

RLSA-2026:33093, released July 5, 2026, fixes 9 CVEs in mariadb10.11 (version 3:10.11.18-1.el10_2). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0158
75th percentile

Priority of the 9 CVEs

Patch now 0 Urgent 0 High 9 Routine 0

Fixed package versions

ProductReleaseFixed in
mariadb10.11rocky 103:10.11.18-1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-49261 mariadb11.8: MariaDB server is a community developed fork of MySQL server 9.9 0.0158 None reported
High CVE-2026-48165 mariadb11.8: MariaDB server is a community developed fork of MySQL server 9.9 0.0151 None reported
High CVE-2026-44170 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 9.9 0.0133 None reported
High CVE-2026-44172 mariadb-connector-c: MariaDB server is a community developed fork of MySQL server 9.9 0.0104 None reported
High CVE-2026-48163 mariadb10.11: MariaDB server is a community developed fork of MySQL server 9.9 0.0091 None reported
High CVE-2026-44173 mariadb10.11: MariaDB server is a community developed fork of MySQL server 9.9 0.0062 None reported
High CVE-2026-44168 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 9.9 0.0059 None reported
High CVE-2026-44169 mariadb-client-utils: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 9.9 0.0024 None reported
High CVE-2026-44171 mariadb10.11: MariaDB server is a community developed fork of MySQL server 9.9 0.0019 None reported
Showing 1 to 9 of 9 1