CLSA-2026-1783357653

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1783357653
Upstream
CVE (5)
Published
2026-07-06T17:07:56Z
Modified
2026-10-26T09:43:59Z
Summary
mariadb: Fix of 5 CVEs
Details
  • CVE-2026-49261: reject shell-unsafe characters in Galera joiner node name and incoming address before interpolating into wsrep_notify_cmd
  • CVE-2026-48165: validate wsrep_sst_receive_address and wsrep_sst_donor for accepted characters to block SST shell command injection
  • CVE-2026-44168: add safe() helper and validate joiner-supplied params in the mariabackup SST donor path against shell command injection
  • CVE-2026-48163: validate joiner-supplied parameters in the rsync SST donor path against shell command injection
  • CVE-2026-44172: correct big5 lead/tail byte validation in the bundled Connector/C so mysql_real_escape_string cannot be bypassed via big5
References

Affected packages

TuxCare:AlmaLinux:9.2
mariadb

Package

Name
mariadb
Purl
pkg:rpm/tuxcare/mariadb?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-backup

Package

Name
mariadb-backup
Purl
pkg:rpm/tuxcare/mariadb-backup?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-common

Package

Name
mariadb-common
Purl
pkg:rpm/tuxcare/mariadb-common?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-devel

Package

Name
mariadb-devel
Purl
pkg:rpm/tuxcare/mariadb-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-embedded

Package

Name
mariadb-embedded
Purl
pkg:rpm/tuxcare/mariadb-embedded?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-embedded-devel

Package

Name
mariadb-embedded-devel
Purl
pkg:rpm/tuxcare/mariadb-embedded-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-errmsg

Package

Name
mariadb-errmsg
Purl
pkg:rpm/tuxcare/mariadb-errmsg?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-gssapi-server

Package

Name
mariadb-gssapi-server
Purl
pkg:rpm/tuxcare/mariadb-gssapi-server?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-oqgraph-engine

Package

Name
mariadb-oqgraph-engine
Purl
pkg:rpm/tuxcare/mariadb-oqgraph-engine?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-pam

Package

Name
mariadb-pam
Purl
pkg:rpm/tuxcare/mariadb-pam?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-server

Package

Name
mariadb-server
Purl
pkg:rpm/tuxcare/mariadb-server?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-server-galera

Package

Name
mariadb-server-galera
Purl
pkg:rpm/tuxcare/mariadb-server-galera?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-server-utils

Package

Name
mariadb-server-utils
Purl
pkg:rpm/tuxcare/mariadb-server-utils?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"
mariadb-test

Package

Name
mariadb-test
Purl
pkg:rpm/tuxcare/mariadb-test?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3:10.5.29-1.el9_2.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783357653.json"