{"id":"CLSA-2026-1783357653","summary":"mariadb: Fix of 5 CVEs","details":"- CVE-2026-49261: reject shell-unsafe characters in Galera joiner node\n  name and incoming address before interpolating into wsrep_notify_cmd\n- CVE-2026-48165: validate wsrep_sst_receive_address and wsrep_sst_donor\n  for accepted characters to block SST shell command injection\n- CVE-2026-44168: add safe() helper and validate joiner-supplied params\n  in the mariabackup SST donor path against shell command injection\n- CVE-2026-48163: validate joiner-supplied parameters in the rsync SST\n  donor path against shell command injection\n- CVE-2026-44172: correct big5 lead/tail byte validation in the bundled\n  Connector/C so mysql_real_escape_string cannot be bypassed via big5","modified":"2026-10-26T09:43:59.520482093Z","published":"2026-07-06T17:07:56Z","upstream":["CVE-2026-44168","CVE-2026-44172","CVE-2026-48163","CVE-2026-48165","CVE-2026-49261"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1783357653.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44168"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44172"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48163"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48165"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49261"}],"affected":[{"package":{"name":"mariadb","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-backup","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-backup?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-embedded","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-embedded?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-embedded-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-embedded-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-errmsg","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-errmsg?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-gssapi-server","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-gssapi-server?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-oqgraph-engine","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-oqgraph-engine?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-pam","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-pam?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-server","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-server?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-server-galera","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-server-galera?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-server-utils","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-server-utils?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}},{"package":{"name":"mariadb-test","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mariadb-test?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:10.5.29-1.el9_2.alma.1.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"}}],"schema_version":"1.9.0"}