Linux · Oracle Linux · Security advisory · April 2, 2026

ELSA-2026-6435: Security update for 16 packages

ELSA-2026-6435, released April 2, 2026, fixes 2 CVEs across 16 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Highest CVSS
7.0
Base score, 0 to 10
Highest EPSS
0.0050
43rd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
Judyol 80:1.0.5-18.module+el8.10.0+90753+7c7ea859
galeraol 80:26.4.23-1.module+el8.10.0+90861+51dde83f
mariadbol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-backupol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-commonol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-develol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-embeddedol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-embedded-develol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-errmsgol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-gssapi-serverol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-oqgraph-engineol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-pamol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-serverol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-server-galeraol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-server-utilsol 83:10.11.15-1.module+el8.10.0+90861+51dde83f
mariadb-testol 83:10.11.15-1.module+el8.10.0+90861+51dde83f

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-52971 MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.7.0 0.0050 None reported
Routine CVE-2026-21968 galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL6.5 0.0031 None reported
Showing 1 to 2 of 2 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.