Back Linuxsecurity

Fedora 42: Critical Remote Code Exec Flaw in MariaDB 10.11.15 Found

Linuxsecurity •LinuxSecurity Advisories • January 10, 2026

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Update Information : MariaDB 10.11.15 Release notes: server/10.11/10.11.15

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded

SQL database server. It is a client/server implementation consisting of

a server daemon (mariadbd) and many different client programs and libraries.

The base package contains the standard MariaDB/MySQL client programs and

MariaDB 10.11.15 Release notes: server/10.11/10.11.15

* Mon Nov 10 2025 Pavol Sloboda - 3:10.11.15-1 - Rebase to 10.11.15 * Tue Aug 12 2025 Pavol Sloboda - 3:10.11.14-1 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 * Fri Jun 6 2025 Pavol Sloboda - 3:10.11.13-1 - Rebase to 10.11.13 * Mon May 5 2025 Michal Schorm - 3:10.11.11-7 - Bump release for package rebuild

[ 1 ] Bug #2417694 - CVE-2025-13699 mariadb10.11: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation [fedora-42] [ 2 ] Bug #2426774 - Request update of MariaDB 10.11.x in Fedora 42 due to critical InnoDB false corruption / doublewrite bug

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-03f07fde5d' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Remote Code Execution Flaw in MariaDB 10.11.15 Identified A critical remote code execution vulnerability has been found in MariaDB version 10.11.15, affecting users of this SQL database server. The flaw could allow unauthorized access and control over affected systems. Users are advised to update to the latest version to mitigate risks. 2 sources 46

Extracted Entities

Fedora 42: Critical Remote Code Exec Flaw in MariaDB 10.11.15 Found

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)