Red Hat Product Errata RHSA-2026:33412 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33412 - Security Advisory Overview Updated Packages Synopsis Important: galera and mariadb11.8 security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for multiple packages is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es): mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261) Bug Fix(es) and Enhancement(s): Rebase MariaDB 11.8 to 11.8.8 in RHEL10 (JIRA:RHEL-183084) Rebase Galera to 26.4.27 in RHEL10 (JIRA:RHEL-183259) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2487957 - CVE-2026-49261 mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd RHEL-183084 - Rebase MariaDB 11.8 to 11.8.8 in RHEL10 RHEL-183259 - Rebase Galera to 26.4.27 in RHEL10 CVEs CVE-2026-49261 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM galera-26.4.27-1.el10_2.src.rpm SHA-256: 1bfa297243cc3bb79c7401c4bc3d625d394d904d7f5f7611b1a920b0b18591ad mariadb11.8-11.8.8-1.el10_2.src.rpm SHA-256: 048475f6e6aa0110e07b0f11e013a05507e9d7047e07bb28d7279bf8ffba3db6 x86_64 galera-26.4.27-1.el10_2.x86_64.rpm SHA-256: 404f914df345b0294893c0585fd9ca37fa5e6bfa184c42a3dad530b366c9a255 galera-debuginfo-26.4.27-1.el10_2.x86_64.rpm SHA-256: f8db3c52bfbdb15d04e56245a4ebb152b1f1e75491b8eccce35393c0c58c1bca galera-debugsource-26.4.27-1.el10_2.x86_64.rpm SHA-256: c5641991bc826a721617874e5e9f57b83258dc0829f87519d51512dfb1e6f8d8 mariadb11.8-11.8.8-1.el10_2.x86_64.rpm SHA-256: 5b827cd7e011ac741201e9459ae78f902c2cc3711b471d2a1ac5bac54a816fb6 mariadb11.8-backup-11.8.8-1.el10_2.x86_64.rpm SHA-256: 1ede8813c6f6fa8a84adafd2d6d0b2554ddd4072fe4cf6075559f3d5ed86b8a8 mariadb11.8-backup-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 37148c134c8e6621a38339a3e2d7188e2d08ba32faa48bd2a9906eecdffe9870 mariadb11.8-client-utils-11.8.8-1.el10_2.noarch.rpm SHA-256: 7dadd73794fa706238c557e81179b16fe5f9ebe5748b95b521922afe5b9588d1 mariadb11.8-common-11.8.8-1.el10_2.noarch.rpm SHA-256: bdbb0a3142550ac8751d80be282a20edaeefa90d9dcfbfdeb0a7fef56995b916 mariadb11.8-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 1f06d4051f1378782d5221244d6eac3daacc35b282233ebd6f0466d32b839ea6 mariadb11.8-debugsource-11.8.8-1.el10_2.x86_64.rpm SHA-256: 0c6db1d19b5d16288ed838204d8683c958511146e32776fdaa4a036e317edaf1 mariadb11.8-devel-11.8.8-1.el10_2.x86_64.rpm SHA-256: 65aa47330fce677685f3673dfc65db206c430ffe1c699eb8459a6e4a19cccd40 mariadb11.8-embedded-11.8.8-1.el10_2.x86_64.rpm SHA-256: cea13d14b7f2df496757cacdc6e40715192a95185177bee62dff35d520257543 mariadb11.8-embedded-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 67985abe4b5059def1dd68d11b5fb38ebecf82ce1912d520a26f0aba63d1f8cb mariadb11.8-embedded-devel-11.8.8-1.el10_2.x86_64.rpm SHA-256: e2c9bb4c5940debf65bb1a65efe15176e079fff081a6ed521fce115e950785c5 mariadb11.8-errmsg-11.8.8-1.el10_2.noarch.rpm SHA-256: 5cbacc753096318a19184b89aa5903c6f5853944b52b706fbc824734e5d680e8 mariadb11.8-gssapi-server-11.8.8-1.el10_2.x86_64.rpm SHA-256: 738e5e7e7a7751c1d16d545e9a62217e21356c62953c08c4f51530b9796d7396 mariadb11.8-gssapi-server-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: b2ea2bce5214b5f500e497ef8388844293b73145a58b70619c47383fce015e07 mariadb11.8-oqgraph-engine-11.8.8-1.el10_2.x86_64.rpm SHA-256: 400a82ed02b14b50526680b37f08f9ff6b131244e6bf384fa3f77fd7055147e6 mariadb11.8-oqgraph-engine-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 890176653e3a8d1e7a940aa0f35370dbfe0aa6b0bde126884d0d1d79cd2e991d mariadb11.8-pam-11.8.8-1.el10_2.x86_64.rpm SHA-256: 96f0074f410630d3319bea077b79c58ab59c3203b591576c1d19f2cdf5502c02 mariadb11.8-pam-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 440127bf66ef8af00a9ca50f107a629291ee023660f4271baa026f00fe60d0da mariadb11.8-server-11.8.8-1.el10_2.x86_64.rpm SHA-256: 18e63df2bafaebae15f1f83d7d4cc3f3332d893fefcacb865341d88120322309 mariadb11.8-server-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 180b6081cee057acd0866bc8c29d650a38299c3e571475310bbb4a1a002e0f5f mariadb11.8-server-galera-11.8.8-1.el10_2.x86_64.rpm SHA-256: a1817a0c36bb18c1b5b2695439976e8b021913ffe2b4d97b29b9797d98c36797 mariadb11.8-server-galera-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: ce82a2d4791f7756508fc6addb34ef4566957fe8ef98c1094d29a3af5631b0dc mariadb11.8-server-utils-11.8.8-1.el10_2.noarch.rpm SHA-256: 00902417f55abe09db7e6d639faf6cbb908a1beb3ce0aa98f40d442bd1d8deba mariadb11.8-test-11.8.8-1.el10_2.x86_64.rpm SHA-256: 5c8c98bd77ccd326ab7d205596a8c24e5ed53a92fb6c6687ad2a083492a3b22f mariadb11.8-test-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: b5e1a1c66306546cb15939073a8cc3504de6f19b247f49c276cd949be199dc0d Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM galera-26.4.27-1.el10_2.src.rpm SHA-256: 1bfa297243cc3bb79c7401c4bc3d625d394d904d7f5f7611b1a920b0b18591ad mariadb11.8-11.8.8-1.el10_2.src.rpm SHA-256: 048475f6e6aa0110e07b0f11e013a05507e9d7047e07bb28d7279bf8ffba3db6 x86_64 galera-26.4.27-1.el10_2.x86_64.rpm SHA-256: 404f914df345b0294893c0585fd9ca37fa5e6bfa184c42a3dad530b366c9a255 galera-debuginfo-26.4.27-1.el10_2.x86_64.rpm SHA-256: f8db3c52bfbdb15d04e56245a4ebb152b1f1e75491b8eccce35393c0c58c1bca galera-debugsource-26.4.27-1.el10_2.x86_64.rpm SHA-256: c5641991bc826a721617874e5e9f57b83258dc0829f87519d51512dfb1e6f8d8 mariadb11.8-11.8.8-1.el10_2.x86_64.rpm SHA-256: 5b827cd7e011ac741201e9459ae78f902c2cc3711b471d2a1ac5bac54a816fb6 mariadb11.8-backup-11.8.8-1.el10_2.x86_64.rpm SHA-256: 1ede8813c6f6fa8a84adafd2d6d0b2554ddd4072fe4cf6075559f3d5ed86b8a8 mariadb11.8-backup-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 37148c134c8e6621a38339a3e2d7188e2d08ba32faa48bd2a9906eecdffe9870 mariadb11.8-client-utils-11.8.8-1.el10_2.noarch.rpm SHA-256: 7dadd73794fa706238c557e81179b16fe5f9ebe5748b95b521922afe5b9588d1 mariadb11.8-common-11.8.8-1.el10_2.noarch.rpm SHA-256: bdbb0a3142550ac8751d80be282a20edaeefa90d9dcfbfdeb0a7fef56995b916 mariadb11.8-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 1f06d4051f1378782d5221244d6eac3daacc35b282233ebd6f0466d32b839ea6 mariadb11.8-debugsource-11.8.8-1.el10_2.x86_64.rpm SHA-256: 0c6db1d19b5d16288ed838204d8683c958511146e32776fdaa4a036e317edaf1 mariadb11.8-devel-11.8.8-1.el10_2.x86_64.rpm SHA-256: 65aa47330fce677685f3673dfc65db206c430ffe1c699eb8459a6e4a19cccd40 mariadb11.8-embedded-11.8.8-1.el10_2.x86_64.rpm SHA-256: cea13d14b7f2df496757cacdc6e40715192a95185177bee62dff35d520257543 mariadb11.8-embedded-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 67985abe4b5059def1dd68d11b5fb38ebecf82ce1912d520a26f0aba63d1f8cb mariadb11.8-embedded-devel-11.8.8-1.el10_2.x86_64.rpm SHA-256: e2c9bb4c5940debf65bb1a65efe15176e079fff081a6ed521fce115e950785c5 mariadb11.8-errmsg-11.8.8-1.el10_2.noarch.rpm SHA-256: 5cbacc753096318a19184b89aa5903c6f5853944b52b706fbc824734e5d680e8 mariadb11.8-gssapi-server-11.8.8-1.el10_2.x86_64.rpm SHA-256: 738e5e7e7a7751c1d16d545e9a62217e21356c62953c08c4f51530b9796d7396 mariadb11.8-gssapi-server-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: b2ea2bce5214b5f500e497ef8388844293b73145a58b70619c47383fce015e07 mariadb11.8-oqgraph-engine-11.8.8-1.el10_2.x86_64.rpm SHA-256: 400a82ed02b14b50526680b37f08f9ff6b131244e6bf384fa3f77fd7055147e6 mariadb11.8-oqgraph-engine-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 890176653e3a8d1e7a940aa0f35370dbfe0aa6b0bde126884d0d1d79cd2e991d mariadb11.8-pam-11.8.8-1.el10_2.x86_64.rpm SHA-256: 96f0074f410630d3319bea077b79c58ab59c3203b591576c1d19f2cdf5502c02 mariadb11.8-pam-debuginfo-11.8.8-1.el10_2.x86_64.rpm SHA-256: 440127bf66ef8af00a9ca50f107a629291ee023660f4271baa026f00fe60d0da mariadb11.8-server-11.8.8-1.el10_2.x86_64.rpm SHA-256: 18e63df2bafaebae15f1f83d7d4cc3f3332d893fefcacb865341d8812032
A critical vulnerability (CVE-2026-49261, CVSS 10.0) in MariaDB allows for arbitrary code execution via the `wsrep_notify_cmd` parameter. Affected versions include MariaDB 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, and 11.8.1 through 11.8.7. The fix requires upgrading to MariaDB 10.6.27, 10.11.18, 11.4.12, or 11.8.8, which are included in this Red Hat update.