MariaDB -- Multiple vulnerabilities
· CVE-2026-48165, CVE-2026-48163, CVE-2026-49261 · VuXML entry
The MariaDB project reports: Multiple vulnerabilities in MariaDB Cluster (Galera)
Affected versions
- mariadb118-server < 11.8.8
- mariadb114-server < 11.4.12
- mariadb1011-server < 10.11.18
- mariadb106-server < 10.6.27
By system
1 still vulnerable, 3 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | databases/mariadb118-server | 11.8.9 | fixed | (88 days after) |
| NetBSD | databases/mariadb118-server | 11.8.8nb2 | not listed | |
| MidnightBSD | databases/mariadb118-server | 11.8.9 | out of range, by version | |
| FreeBSD | databases/mariadb114-server | 11.4.13 | fixed | (88 days after) |
| NetBSD | databases/mariadb114-server | 11.4.12nb2 | not listed | |
| MidnightBSD | databases/mariadb114-server | 11.4.13 | out of range, by version | |
| FreeBSD | databases/mariadb1011-server | 10.11.19 | fixed | (88 days after) |
| NetBSD | databases/mariadb1011-server | 10.11.18nb2 | not listed | |
| DragonFly | databases/mariadb106-server | 10.6.14 | vulnerable since 2026-05-29 | |
| NetBSD | databases/mariadb106-server | 10.6.27nb2 | not listed | |
| MidnightBSD | databases/mariadb106-server | 10.6.28 | out of range, by version |