Linux · Security advisory · April 2, 2026

RLSA-2026:6435: Judy security update

RLSA-2026:6435, released April 2, 2026, fixes 7 CVEs in Judy (version 0:1.0.5-18.module+el8.4.0+431+26aaed18). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0127
70th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 6 Routine 1

Fixed package versions

ProductReleaseFixed in
Judyrocky 80:1.0.5-18.module+el8.4.0+431+26aaed18

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-21490 libmariadb3: Vulnerability in the MySQL Server product of Oracle MySQL (component:InnoDB) 7.5 0.0127 None reported
High CVE-2025-30693 mariadb10.11: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) 7.0 0.0098 None reported
High CVE-2023-52971 MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan. 7.0 0.0050 None reported
High CVE-2025-30722 mariadb10.11: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump) 7.0 0.0050 None reported
High CVE-2023-52969 mariadb: This update for mariadb fixes the following issues: Update to version 10.11.14. Security issues fixed: - CVE-2025-... 7.0 0.0047 None reported
High CVE-2023-52970 mariadb: This update for mariadb fixes the following issues: Update to version 10.11.14. Security issues fixed: - CVE-2025-... 7.0 0.0046 None reported
Routine CVE-2026-21968 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL 6.5 0.0031 None reported
Showing 1 to 7 of 7 1