RHSA-2026:33481 — Security Advisory

An update for the mariadb:11.8 module is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

• mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)

Bug Fix(es) and Enhancement(s):

• [RHEL9] [tracker] Rebase Galera to 26.4.27 MariaDB:11.8 (JIRA:RHEL-140364)

• Rebase MariaDB 11.8 to 11.8.8 in RHEL9 (JIRA:RHEL-183085)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.