Back Linuxsecurity Fedora 43: mariadb10.11 Important Remote Code Execution 2026
MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Update Information : MariaDB 10.11.15 Release notes: server/10.11/10.11.15
MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded
SQL database server. It is a client/server implementation consisting of
a server daemon (mariadbd) and many different client programs and libraries.
The base package contains the standard MariaDB/MySQL client programs and
MariaDB 10.11.15 Release notes: server/10.11/10.11.15
* Mon Nov 10 2025 Pavol Sloboda - 3:10.11.15-1 - Rebase to 10.11.15 * Wed Oct 29 2025 Nikola Davidova - 3:10.11.14-3 - Bump release for tmpfiles.d change * Mon Oct 27 2025 Lukas Javorsky - 3:10.11.14-2 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files * Tue Aug 12 2025 Pavol Sloboda - 3:10.11.14-1 - Rebase to 10.11.14 - Resolves: RHBZ#2386961
* Mon Nov 10 2025 Pavol Sloboda - 3:10.11.15-1 - Rebase to 10.11.15 * Wed Oct 29 2025 Nikola Davidova - 3:10.11.14-3 - Bump release for tmpfiles.d change * Mon Oct 27 2025 Lukas Javorsky - 3:10.11.14-2 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files * Tue Aug 12 2025 Pavol Sloboda - 3:10.11.14-1 - Rebase to 10.11.14 - Resolves: RHBZ#2386961
[ 1 ] Bug #2417696 - CVE-2025-13699 mariadb10.11: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation [fedora-43]
[ 1 ] Bug #2417696 - CVE-2025-13699 mariadb10.11: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation [fedora-43]
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-39e035a84c' at the command line. For more information, refer to the dnf documentation available at
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
