MariaDB Galera fix advisory: include database cluster configurations in patch management
The MariaDB Foundation's fix advisory lists Galera security updates across several branches, concerning cluster parameter handling. This is an earlier patch baseline. Current deployments should continue checking later versions within their supported branch.
Source Facts
MariaDB Foundation published an article on 2 June explaining fixed Community Server versions, listing 10.6.27, 10.11.18, 11.4.12 and 11.8.8. It urges Galera users to review the security advisory promptly. These versions had already been made available progressively before the article was published.
The advisory links these issues to CVE-2026-49261, CVE-2026-48165 and CVE-2026-48163, concerning cluster notification and state-transfer parameter handling. It distinguishes branches requiring urgent fixes from version 12.3, which was not affected by those issues at the time. Do not generalise to all MariaDB deployments.
Include cluster nodes, notification scripts and state transfer configurations in database maintenance checklists. Fixed versions in an older advisory should not automatically be treated as today's latest versions.
Original sources
MariaDB Community Server Corrective Releases
Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationAmazon Linux updates its Docker security advisory: check container hosts and archive handling
IllustrationPHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause
Illustration