An update for mariadb is now available for openEuler-24.03-LTS-SP2 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-1536 Final 1.0 1.0 2026-03-06 Initial 2026-03-06 2026-03-06 openEuler SA Tool V1.0 2026-03-06 mariadb security update An update for mariadb is now available for openEuler-24.03-LTS-SP2 MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es): MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.(CVE-2025-13699) An update for mariadb is now available for openEuler-24.03-LTS-SP2. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High mariadb https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1536 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-13699 https://nvd.nist.gov/vuln/detail/CVE-2025-13699 openEuler-24.03-LTS-SP2 mariadb-10.5.29-3.oe2403sp2.src.rpm mariadb-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-backup-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-common-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-config-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-debuginfo-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-debugsource-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-devel-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-embedded-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-embedded-devel-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-errmsg-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-gssapi-server-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-oqgraph-engine-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-pam-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-server-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-server-galera-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-server-utils-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-test-10.5.29-3.oe2403sp2.x86_64.rpm mariadb-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-backup-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-common-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-config-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-debuginfo-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-debugsource-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-devel-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-embedded-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-embedded-devel-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-errmsg-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-gssapi-server-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-oqgraph-engine-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-pam-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-rocksdb-engine-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-server-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-server-galera-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-server-utils-10.5.29-3.oe2403sp2.aarch64.rpm mariadb-test-10.5.29-3.oe2403sp2.aarch64.rpm MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000. 2026-03-06 CVE-2025-13699 openEuler-24.03-LTS-SP2 High 7.0 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H mariadb security update 2026-03-06 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1536