Release date:
2026-07-08 14:50:37 UTC
Description:
- CVE-2026-49261: reject shell-unsafe characters in Galera joiner-supplied node
name and incoming address before interpolating into wsrep_notify_cmd
- CVE-2026-48165: validate wsrep_sst_receive_address and wsrep_sst_donor for
accepted characters to block SST shell command injection
- CVE-2026-44168: add safe() helper and validate joiner-supplied parameters in
the mariabackup SST donor path against shell command injection
- CVE-2026-48163: validate joiner-supplied parameters in the rsync SST donor
path against shell command injection
- CVE-2026-44172: correct big5 lead/tail byte validation in the bundled
Connector/C so mysql_real_escape_string cannot be bypassed via big5
Updated packages:
-
mariadb-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:ae47a4bae90d2e5dc77f2abdb3d798f59f4414a0bafbcf359ae03942e0174b74
-
mariadb-backup-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:b19e84d7a42e51227c67e80be17288aa9c5892d17919356c2731b0d49d33a83b
-
mariadb-common-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:42fe2ef921c9e196a998d6b8fb0d4bee183fcd0d3ae49d83661777c8765ec78a
-
mariadb-devel-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:1064a3734815ee75212a8c3a0e2030b81b1c4930d45b9ef739991aff8587beb1
-
mariadb-embedded-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:19fcf622a6f1f504ae8a2f0a84db3fd328707afef30ec216157c0a6767b75fe8
-
mariadb-embedded-devel-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:b38311497f12f5de371fcb2350fedabed465d1d6e2e6fcc675e26cb8736f6957
-
mariadb-errmsg-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:f0b2ad2b7615a7e4e53f62c7bcb0c7e3bb04ff9a3fe8f5fd2e3e3a704942ef85
-
mariadb-gssapi-server-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:a3c3818f7489f1de35055044011479f1d3c98849c567680204a2701fb0328bd8
-
mariadb-oqgraph-engine-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:dafa659f755f68e44a6c4fdd0dec1878dc52bb1073e6bd2e39d08404d62f6e67
-
mariadb-pam-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:e5dedf1cbf1eda08ff4eba81b0e9d459961462c267b6a97bb789c4dba59987ae
-
mariadb-server-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:a9143899315426bee46c79d51f6385cdde71349f1e220893c9ee7479e53c4cba
-
mariadb-server-galera-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:791e3af8a088f62192ce4e0087f290e0932c42e4fcba7159ccdb0d0fb7221215
-
mariadb-server-utils-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:5b80b252c3f69292aa7a35fa3483f4f387804c53af3250f62793a50614cf5554
-
mariadb-test-10.5.29-2.el9_6.tuxcare.els2.x86_64.rpm
sha:7e2d454ec39a803a58e86aba667e3e85a2dbe88aec06f735b38048a5e9e5f87a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
