Red Hat Product Errata RHSA-2026:33482 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33482 - Security Advisory Overview Updated Packages Synopsis Important: mariadb:10.11 security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the mariadb:10.11 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fix(es): mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261) Bug Fix(es) and Enhancement(s): [RHEL9][tracker] Rebase Galera to 26.4.27 MariaDB:10.11 (JIRA:RHEL-140363) Rebase MariaDB 10.11 to 10.11.18 in RHEL9 (JIRA:RHEL-183087) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2487957 - CVE-2026-49261 mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd RHEL-140363 - [RHEL9][tracker] Rebase Galera to 26.4.27 MariaDB:10.11 RHEL-183087 - Rebase MariaDB 10.11 to 10.11.18 in RHEL9 CVEs CVE-2026-49261 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM galera-26.4.27-1.module+el9.8.0+24388+85f1c439.src.rpm SHA-256: 17b80e3385f4847bea749729ad22ee8a126dc079c71b2b57852ec80613386df2 mariadb-10.11.18-1.module+el9.8.0+24388+85f1c439.src.rpm SHA-256: 3c0f1fe18a7e1a0a394165b23bf08f36908f8a7e8a5db53cccf0c238653889f5 x86_64 galera-26.4.27-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: e56fc344a9bb92f942453ece237d2c28ac3ab36dabae16ba3f477a0c34648065 galera-debuginfo-26.4.27-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: a2cac1916bd665e65cc6834e3ab3b9d12ff55eb97389c521130a200724912aec galera-debugsource-26.4.27-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 84f6ad14ec7d733e5aabc453119781b0836e1a231f86cfb9941e3b170923154a mariadb-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 34bad9924a92fd3bedb84c28bef110cd12daa3252daa1e84b8178ac6fefe165e mariadb-backup-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: d1432595fd13edf451908c801db17ff61e69f610cbcee43ff04f8a577bdee813 mariadb-backup-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: f3ee75ad08b48586f834ccdde4fd71f5f24ae8bda2ef50dd650b60261df12cec mariadb-common-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: cb7400da3de76e672c72730b1055b1ad1073b27aceaccdd1f32a8d127a1ae191 mariadb-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 6384abd958680bd819f41db1a0aaa311008e5937079edfdb8815d9fc190a8baf mariadb-debugsource-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 5bfbc1f674a60251f58e2aa950a314f1005817d38d4bdb1a0eee5fc4b40fce1d mariadb-devel-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: b86c1116cc4470f0cda7b9f8548dac69b94f6ce35767b458eeac96d465a1e926 mariadb-embedded-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 5ccc9aa483e9d84e19c724ca941c3a11cedf45e3e28a668fcf36235dd5ac8935 mariadb-embedded-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 261fc5dbdc7ebafaa5ab459c34693a46e629c3f63640876aee811ebe6406cfb7 mariadb-embedded-devel-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 391025ae7d544cdd049d2d43a9aac2d64921d9976e391c2317b6e7612d6ed5f0 mariadb-errmsg-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 6279fadfb71dd7d27b66cb72fb73126f4b0c4e469d28e9a3885146f7c8e4a659 mariadb-gssapi-server-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 19e539d9854ff00fb06ca72e699bdd0456355556f654911f97bca92284df8a81 mariadb-gssapi-server-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 58f477837a978a44dad73ca570190dbac547bada8df121c3b746edc23f45c3b2 mariadb-oqgraph-engine-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 3560003c4f934f03e8eef29bd7c0b004244c11da277bae1bcd660857c9e20bea mariadb-oqgraph-engine-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 442ac5062772ed5a46f479d131d250922a6c24e1b5e377724f54f55cee53fad5 mariadb-pam-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 71fe926233e6ac31bc22d94b85cc439e9738c65dd5ace168cbdb9af835e0cd5a mariadb-pam-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: ec8977b5c9152a7170c71f0d19e11370c2e7fadb76a9fc748d83ccffbf50c396 mariadb-server-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: d6d79ecbfbd82737a6197882a0cdbb7de73c3e0b1ca4136c5cf5c848f993bcd3 mariadb-server-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 7f73cdf36c18e9db74b5750d3423e6fc59ca8ab0ff62e447cf0ae616a7079882 mariadb-server-galera-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: ade6c022799a193401665b256a3f1b16b8334a11150b8f1a256b1c3257b73bcd mariadb-server-utils-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 5fe9c57573c122fdd070ad753d7273b8d5a41cd74aa6c31e19c4662dc57a63d3 mariadb-server-utils-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 9597d67f1b81874cb9b17668e39302ae5feb8778cae3fc84fe07189cd85ca4cb mariadb-test-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 70589af597a5c9fd79434b2735a525ece129d1bb873373b6584ef9a8bf144104 mariadb-test-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 5bb425a36ae5ceae3879fb01fa648d7b640b40f8580a8cbc02f3c1b27a42d043 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM galera-26.4.27-1.module+el9.8.0+24388+85f1c439.src.rpm SHA-256: 17b80e3385f4847bea749729ad22ee8a126dc079c71b2b57852ec80613386df2 mariadb-10.11.18-1.module+el9.8.0+24388+85f1c439.src.rpm SHA-256: 3c0f1fe18a7e1a0a394165b23bf08f36908f8a7e8a5db53cccf0c238653889f5 x86_64 galera-26.4.27-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: e56fc344a9bb92f942453ece237d2c28ac3ab36dabae16ba3f477a0c34648065 galera-debuginfo-26.4.27-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: a2cac1916bd665e65cc6834e3ab3b9d12ff55eb97389c521130a200724912aec galera-debugsource-26.4.27-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 84f6ad14ec7d733e5aabc453119781b0836e1a231f86cfb9941e3b170923154a mariadb-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 34bad9924a92fd3bedb84c28bef110cd12daa3252daa1e84b8178ac6fefe165e mariadb-backup-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: d1432595fd13edf451908c801db17ff61e69f610cbcee43ff04f8a577bdee813 mariadb-backup-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: f3ee75ad08b48586f834ccdde4fd71f5f24ae8bda2ef50dd650b60261df12cec mariadb-common-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: cb7400da3de76e672c72730b1055b1ad1073b27aceaccdd1f32a8d127a1ae191 mariadb-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 6384abd958680bd819f41db1a0aaa311008e5937079edfdb8815d9fc190a8baf mariadb-debugsource-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 5bfbc1f674a60251f58e2aa950a314f1005817d38d4bdb1a0eee5fc4b40fce1d mariadb-devel-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: b86c1116cc4470f0cda7b9f8548dac69b94f6ce35767b458eeac96d465a1e926 mariadb-embedded-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 5ccc9aa483e9d84e19c724ca941c3a11cedf45e3e28a668fcf36235dd5ac8935 mariadb-embedded-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 261fc5dbdc7ebafaa5ab459c34693a46e629c3f63640876aee811ebe6406cfb7 mariadb-embedded-devel-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 391025ae7d544cdd049d2d43a9aac2d64921d9976e391c2317b6e7612d6ed5f0 mariadb-errmsg-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 6279fadfb71dd7d27b66cb72fb73126f4b0c4e469d28e9a3885146f7c8e4a659 mariadb-gssapi-server-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 19e539d9854ff00fb06ca72e699bdd0456355556f654911f97bca92284df8a81 mariadb-gssapi-server-debuginfo-10.11.18-1.module+el9.8.0+24388+85f1c439.x86_64.rpm SHA-256: 58f477837a978a44dad73ca570190dbac547bada8df121c3b746edc23f45c3b2 mariadb-oqgraph-engine-10.11.18-1.module
A critical vulnerability (CVE-2026-49261, CVSS 10.0) in MariaDB Server allows for arbitrary code execution via the `wsrep_notify_cmd` parameter. Affected versions include MariaDB 10.11.1 through 10.11.17, among other major release lines. The fix is included in MariaDB version 10.11.18 for RHEL 9 systems.