{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "ELSCVE-226277: Fix CVE-2026-107814 - mysql user home set to datadir allows dot-file code execution\n- ELSCVE-226276: Fix CVE-2026-107815 - CONNECT DOS table one-byte stack OOB write (MDEV-40637)\n- ELSCVE-226736: Fix CVE-2026-107816 - qc_info OOB read on query containing NUL (MDEV-40670)\n- ELSCVE-226734: Fix CVE-2026-107817 - mysql_json plugin OOB reads on invalid binary JSON (MDEV-40678)\n- ELSCVE-226274: Fix CVE-2026-107821 - insufficient validation of frm data when opening a table (MDEV-40571)\n- ELSCVE-226735: Fix CVE-2026-107822 - role vs user@localhost acl_cache key confusion (MDEV-40541)\n- ELSCVE-226273: Fix CVE-2026-107823 - ambiguous view frm parsing when username contains newline (MDEV-40484)", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/advisories/2026/clsa-2026_1792019173.json" } ], "tracking": { "current_release_date": "2026-10-20T09:34:28Z", "generator": { "date": "2026-10-20T09:34:28Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792019173", "initial_release_date": "2026-10-14T23:06:14Z", "revision_history": [ { "date": "2026-10-14T23:06:14Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-20T09:34:28Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "cl-MariaDB106: Fix of 7 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "CloudLinux 7", "product": { "name": "CloudLinux 7", "product_id": "CloudLinux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "CloudLinux" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-server@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-libs@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-devel@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB-meta-client@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-connect-engine@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB-meta@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-s3-engine@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-rocksdb-engine@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-gssapi-server@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product": { "name": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_id": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB-meta-devel@10.6.20-1.el7.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB-meta@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-libs@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-connect-engine@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB-meta-client@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-rocksdb-engine@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-server@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-gssapi-server@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB-meta-devel@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-devel@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product": { "name": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_id": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-s3-engine@10.6.20-1.el7.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-connect-engine@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-rocksdb-engine@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB-meta-client@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB-meta-devel@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB-meta@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-s3-engine@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-gssapi-server@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-libs@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-server@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product": { "name": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_id": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/cl-MariaDB106-devel@10.6.20-1.el7.tuxcare.els2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64" }, "product_reference": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64" }, "product_reference": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64" }, "product_reference": "cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "relates_to_product_reference": "CloudLinux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-107814", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "description", "text": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an administrator opened a login shell for the mysql account. Debian packages are not affected because they use /nonexistent as the account home. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "known_affected": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-107814" }, { "category": "external", "summary": "https://github.com/MariaDB/server/commit/d842d6e994a8b0d67c280bf785a11357d6b316a2", "url": "https://github.com/MariaDB/server/commit/d842d6e994a8b0d67c280bf785a11357d6b316a2" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2" }, { "category": "external", "summary": "https://github.com/MariaDB/server/security/advisories/GHSA-m5gf-432r-g5jw", "url": "https://github.com/MariaDB/server/security/advisories/GHSA-m5gf-432r-g5jw" } ], "release_date": "2026-10-09T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T23:06:14.810393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173" }, { "category": "none_available", "date": "2026-10-09T16:17:00Z", "details": "Affected", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-107817", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data could cause out-of-bounds reads, information disclosure, or a server crash. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "known_affected": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-107817" }, { "category": "external", "summary": "https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907", "url": "https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2" }, { "category": "external", "summary": "https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc", "url": "https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc" }, { "category": "external", "summary": "https://jira.mariadb.org/browse/MDEV-40678", "url": "https://jira.mariadb.org/browse/MDEV-40678" } ], "release_date": "2026-10-09T18:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T23:06:14.810393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173" }, { "category": "none_available", "date": "2026-10-09T18:17:00Z", "details": "Affected", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-107821", "cwe": { "id": "CWE-1285", "name": "Improper Validation of Specified Index, Position, or Offset in Input" }, "notes": [ { "category": "description", "text": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "known_affected": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-107821" }, { "category": "external", "summary": "https://github.com/MariaDB/server/commit/3b1c2e58abab5571bec4ff52773ddc75b1738da9", "url": "https://github.com/MariaDB/server/commit/3b1c2e58abab5571bec4ff52773ddc75b1738da9" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2" }, { "category": "external", "summary": "https://github.com/MariaDB/server/security/advisories/GHSA-c4gx-34mg-95q5", "url": "https://github.com/MariaDB/server/security/advisories/GHSA-c4gx-34mg-95q5" }, { "category": "external", "summary": "https://jira.mariadb.org/browse/MDEV-40571", "url": "https://jira.mariadb.org/browse/MDEV-40571" } ], "release_date": "2026-10-09T18:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T23:06:14.810393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173" }, { "category": "none_available", "date": "2026-10-09T18:17:00Z", "details": "Affected", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-107822", "cwe": { "id": "CWE-706", "name": "Use of Incorrectly-Resolved Name or Reference" }, "notes": [ { "category": "description", "text": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. An attacker with CREATE USER could create the colliding principal and, when the original principal's database privileges were cached, exercise privileges assigned to the other account. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "known_affected": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-107822" }, { "category": "external", "summary": "https://github.com/MariaDB/server/commit/67ea07dd3400004e4f7ae01bf977f4344bbe064b", "url": "https://github.com/MariaDB/server/commit/67ea07dd3400004e4f7ae01bf977f4344bbe064b" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2" }, { "category": "external", "summary": "https://github.com/MariaDB/server/security/advisories/GHSA-2m85-2x26-36rf", "url": "https://github.com/MariaDB/server/security/advisories/GHSA-2m85-2x26-36rf" }, { "category": "external", "summary": "https://jira.mariadb.org/browse/MDEV-40541", "url": "https://jira.mariadb.org/browse/MDEV-40541" } ], "release_date": "2026-10-09T18:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T23:06:14.810393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173" }, { "category": "none_available", "date": "2026-10-09T18:17:00Z", "details": "Affected", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-107823", "cwe": { "id": "CWE-116", "name": "Improper Encoding or Escaping of Output" }, "notes": [ { "category": "description", "text": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could create a crafted username containing additional view metadata, causing the parser to interpret part of the username as security metadata and potentially escalating database privileges. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "known_affected": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-107823" }, { "category": "external", "summary": "https://github.com/MariaDB/server/commit/8a642bc8103aadc6b2087d781ba8e1595616a2c4", "url": "https://github.com/MariaDB/server/commit/8a642bc8103aadc6b2087d781ba8e1595616a2c4" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2" }, { "category": "external", "summary": "https://github.com/MariaDB/server/security/advisories/GHSA-g2q2-3936-cp37", "url": "https://github.com/MariaDB/server/security/advisories/GHSA-g2q2-3936-cp37" }, { "category": "external", "summary": "https://jira.mariadb.org/browse/MDEV-40484", "url": "https://jira.mariadb.org/browse/MDEV-40484" } ], "release_date": "2026-10-09T18:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T23:06:14.810393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173" }, { "category": "none_available", "date": "2026-10-09T18:17:00Z", "details": "Affected", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-107816", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "known_affected": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-107816" }, { "category": "external", "summary": "https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e", "url": "https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2" }, { "category": "external", "summary": "https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6", "url": "https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6" }, { "category": "external", "summary": "https://jira.mariadb.org/browse/MDEV-40670", "url": "https://jira.mariadb.org/browse/MDEV-40670" } ], "release_date": "2026-10-09T18:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T23:06:14.810393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173" }, { "category": "none_available", "date": "2026-10-09T18:17:00Z", "details": "Affected", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-107815", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset. An authenticated user able to use the CONNECT engine could cause a crash and potentially remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "known_affected": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-107815" }, { "category": "external", "summary": "https://github.com/MariaDB/server/commit/b369925f6855d3e1f0ebcf453492724b99fda6f8", "url": "https://github.com/MariaDB/server/commit/b369925f6855d3e1f0ebcf453492724b99fda6f8" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3" }, { "category": "external", "summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2", "url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2" }, { "category": "external", "summary": "https://github.com/MariaDB/server/security/advisories/GHSA-4wgx-ffg9-jrwq", "url": "https://github.com/MariaDB/server/security/advisories/GHSA-4wgx-ffg9-jrwq" }, { "category": "external", "summary": "https://jira.mariadb.org/browse/MDEV-40637", "url": "https://jira.mariadb.org/browse/MDEV-40637" } ], "release_date": "2026-10-09T17:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-14T23:06:14.810393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els4.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792019173" }, { "category": "none_available", "date": "2026-10-09T17:16:00Z", "details": "Affected", "product_ids": [ "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-client-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB-meta-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-connect-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-devel-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-gssapi-server-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-libs-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-rocksdb-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-s3-engine-0:10.6.20-1.el7.tuxcare.els3.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els2.x86_64", "CloudLinux-7:cl-MariaDB106-server-0:10.6.20-1.el7.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }