MariaDB 10.6.28 Changelog
MariaDB 10.6.28 is a Stable (GA) release of MariaDB Community Server 10.6, released on 2026-08-13
Alternate download from mariadb.org
Release date: 13 Aug 2026
For the highlights of this release, see the release notes.
The revision number links will take you to the revision's page on GitHub. On GitHub you can view more details of the revision and view diffs of the code modified in that revision.
Revision #210ab6edf4 2026-08-11 10:13:16 +0400
MDEV-40722 DROP PACKAGE leaves PACKAGE BODY grant in mysql.procs_priv
Revision #3064caf84c 2026-08-05 12:07:10 +1000
MDEV-40630: stunnel as Deb/RPM recommends for rsync sst
Revision #851f52470d 2026-08-09 09:53:09 +0200
MDEV-40678 mysql_json plugin OOB reads
Revision #0931994096 2026-08-07 21:18:52 +0200
MDEV-40670 qc_info OOB read if query contains \0
Revision #ee74a71df6 2026-08-07 20:26:14 +0200
mariadb-test: don't use strlen/strend, support lines with embedded \0
Revision #ec4853f72f 2026-08-07 12:17:53 +0200
MDEV-39689 update the test
Revision #69ce9cbcc2 2026-08-06 20:46:00 +0200
MDEV-40658 file_key_management crash on empty FILE: file
Revision #940b8daa51 2026-08-06 20:36:41 +0200
cleanup: encryption.filekeys_encfile_badfile
Revision #e3d62d4e78 2026-08-05 20:57:25 +0200
MDEV-40629 environment injection via wsrep bootstrap in the service file
Revision #574ba66b2d 2026-08-06 10:26:21 +0200
MDEV-40362 fix test
Revision #367efd5674 2026-05-26 12:43:43 +1000
MDEV-31808 crash upon altering table with NEXTVAL for default under exclusive lock
Revision #43565b932e 2026-08-05 15:10:15 +0200
MDEV-40636 CSV crashes on DELETE
Revision #d842d6e994 2026-08-05 15:02:05 +0200
on rpm: don't set mysql user's $HOME to datadir
Revision #b369925f68 2026-08-05 13:14:27 +0200
MDEV-40637 CONNECT crashes on double(255,50) in DOS table
Revision #93092e1129 2026-08-04 11:07:43 +0200
BUG#39449066 Refactor performance schema OBJECT_INSTANCE_BEGIN columns
Revision #f549986947 2026-08-04 10:05:35 +0200
Revert "MDEV-39622 OBJECT_INSTANCE_BEGIN in P_S are unstable, difficult to compare"
Revision #26853cca28 2026-08-03 20:01:42 +0200
MDEV-40589 default exclude list for secure-file-priv
Revision #3704a8a847 2026-08-03 19:55:28 +0200
cleanup: sys_vars.secure_file_priv test
Revision #3b1c2e58ab 2026-07-30 18:36:14 +0200
MDEV-40571 insufficient validation of frm data when opening a table
Revision #1624c2fe79 2026-07-20 21:08:26 +0400
MDEV-39750 ExtractValue does not control recursion depth.
Revision #d29da23e13 2026-08-05 08:27:42 +0300
mysqltest: fix do_exec() status decoding for signal-killed processes
Revision #16cf3d80ff 2026-08-04 14:34:57 +0300
Fix test failure on galera_sst_cn_injection test case.
Revision #af9e20aac1 2026-08-04 15:09:08 +0300
wsrep_info MTR: disable SSL by default for SST
Revision #b68e29a9c6 2026-08-04 12:39:49 +0300
Galera MTR: disable SSL by default for SST, guard tests missing stunnel
Revision #f6d0bd374c 2026-08-03 14:06:13 +0200
new CC 3.3
Revision #4f66ca1b69 2026-07-09 17:45:24 +0200
MDEV-40323 CONNECT engine - add file access checks for JSON UDFs
Revision #6b7cfb4d9e 2026-07-31 08:13:47 +0200
new CC 3.3
Revision #d0eb9e167a 2026-07-29 12:37:29 +1000
MDEV-39981 Fix ST_GEOMFROMGEOJSON returning wrong result with reversed key order
Revision #e4bdf5596c 2026-06-03 13:11:35 +1000
MDEV-39813 ST_GeomFromGeoJSON does not control recursion depth
Revision #67ea07dd34 2026-07-28 23:36:22 +0200
MDEV-40541 role vs user@localhost acl_cache key confusion
Revision #d5fa60c345 2026-07-28 13:08:01 +0200
New CC 3.3
Revision #178a612b39 2026-07-20 19:22:57 +0200
apply reasonable limits to initid.max_length as provided by UDF
Revision #8856f9fe19 2026-07-28 18:35:25 +0200
MDEV-40540 ST_GeomFromWKB stack overrun on deeply nested GeometryCollection
Revision #129e80972d 2026-06-22 17:37:06 +0530
MDEV-28233: rsync SST script silently runs unencrypted if stunnel is not installed
Revision #39569c6606 2026-07-21 18:30:36 +0300
MDEV-37859 mysqltest hex() fails on string arguments
Revision #768796e81a 2026-07-21 10:09:42 +0300
MDEV-37865: IF() function is returning incorrect error
Revision #2dcfc13c69 2026-07-20 14:56:20 +0200
MDEV-37000 disable optimization for Aria remove_key() on affected MSVC
Revision #228e5b506b 2026-04-17 15:22:41 +0200
MDEV-24245 REPAIR/OPTIMIZE on ARCHIVE table corrupts blob/text data
Revision #cf03f61aa4 2021-07-20 16:32:57 +0900
MDEV-39556 SIGSEGV in ha_mroonga::storage_set_keys_in_use on SELECT
Revision #9c8f08a1a3 2026-07-17 14:41:22 +0200
MDEV-38722 server crash hp_rec_key_cmp
Revision #728a4e7b5d 2026-07-14 21:11:28 -0600
MDEV-40298 Use-After-Free when SQL Thread stops in the middle of SHOW SLAVE STATUS
Revision #8ee69168a8 2026-07-22 18:42:22 +0200
cleanup: silence (wrong) maybe-uninitialized warning
Revision #581562f94a 2026-06-22 08:52:58 +0300
MDEV-40056 - Galera Dynamic Variables Susceptible to RCEs
Revision #8a642bc810 2026-07-22 13:21:59 +0200
MDEV-40484 ambiguous view frm parsing when username includes \n
Revision #40c5d53793 2026-07-21 18:34:56 +0200
MDEV-30942 MSAN_OPTIONS=poison_in_dtor=1 causes failures in free_root()
Revision #dbd60d0ad8 2026-07-21 11:42:57 +0200
MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges
Revision #0c8cfc3620 2026-07-17 17:29:59 +0200
MDEV-40426 CONNECT writes unvalidated data from remote server into fixed-len buffer
Revision #f221495d59 2026-07-16 17:26:01 +0200
MDEV-40409 ST_GeomFromText stack overrun on deeply nested GeometryCollection
Revision #bc0913ee22 2026-07-15 18:14:46 +0200
MDEV-40395 MyISAM/Aria silently truncate extensions from filenames, if too long
Revision #f277eefa42 2026-07-13 18:45:01 +0200
MDEV-40362 #mysql50# mixes up with table names in the table cache and on disk
Revision #09153c23ca 2026-07-13 19:00:41 +0200
cleanup: main.drop test
Revision #0260e84ad3 2026-07-13 17:52:26 +0200
MDEV-40360 CONNECT REST can pass arguments to curl via HTTP parameter
Revision #93078fb753 2026-07-13 16:39:07 +0200
MDEV-40358 symlinked table name is not encoded
Revision #5c04ca5524 2026-07-09 20:17:54 +0200
MDEV-40329 Binary_string::qs_append(char): Assertion
str_length + (uint32) (1) <= Alloced_lengthfailed in AsText
Revision #2bf355e361 2026-07-09 17:16:01 +0200
MDEV-40328 ASAN error on malformed WKB multipolygon
Revision #ce0b7254d5 2026-07-11 00:04:24 +0200
MDEV-40311 also fix mariadb-show and mariadb-convert-table-format
Revision #2b28d1c424 2026-07-08 18:01:05 +0200
MDEV-40311 mariadb-dump doesn't always quote identifiers
Revision #3646569225 2026-07-08 14:20:17 +0200
MDEV-40308 single quotes make SHOW CREATE USER invalid
Revision #d5d741a307 2026-06-26 18:25:32 +0200
MDEV-39776 SHOW CREATE TABLE corrupts `-quoted table options
Revision #5acb435228 2026-06-27 13:24:05 +0200
MDEV-39818 backtick in FK names breaks SHOW CREATE TABLE
Revision #b2e0351a91 2026-06-16 16:53:56 +0200
MDEV-40065 bundled command-line clients don't always enforce length limits on server results
Revision #59141cbd2c 2026-06-01 23:54:04 +0200
MDEV-39817 JSON_ARRAYAGG() returns garbage because of off-by-one error
Revision #3079790e00 2026-06-01 21:25:11 +0200
MDEV-39816 MyISAM crash on corrupted MYI with invalid keyseg length
Revision #46bcedce0e 2026-06-01 13:39:30 +0200
MDEV-39812 32-bit size truncation in RocksDB
Revision #6a9305da0a 2026-06-01 11:35:03 +0200
more portability fixes for galera.galera_sst_mariabackup_encrypt_with_key_server
Revision #c0fbc37699 2026-07-16 15:45:15 +0300
MDEV-17746: perfschema.dml_threads failed in buildbot with wrong errno
Revision #fc2cca05b6 2026-07-13 23:18:51 +0300
MDEV-40353 Add eval parameter to write_file and append_file
Revision #5520c9aac5 2026-07-21 14:44:57 +0530
MDEV-28239: rsync and mariabackup SST scripts handle sst ssl_mode option differently Add missing debug rdiff for galera_sst_mariabackup_verify_ca.
Revision #f6113def62 2026-07-01 16:28:34 +0530
MDEV-28239: rsync and mariabackup SST scripts handle sst ssl_mode option differently
Revision #193ced9b84 2026-07-02 14:58:51 +0530
MDEV-35812: Galera SST fails with TLS certificate containing an intermediate CA
Revision #ce3b1fd4ab 2026-07-07 15:31:57 +0530
MDEV-23744: Unable to specify both client and server certificates.
Revision #3ff8c1a937 2026-07-17 10:29:32 +0530
MDEV-38075: Make sysV init script check for actual function presence
Revision #265bf3a9b1 2026-07-06 18:25:37 +0400
MDEV-39750 ExtractValue does not control recursion depth.
Revision #85ab366da3 2026-06-24 22:39:35 +0000
MDEV-39689: Fix OOB reads in Table_map_log_event parsing
Revision #635e24dbdf 2026-07-09 15:50:56 +0530
MDEV-40316: Infer: PULSE_RESOURCE_LEAK in connect
Revision #37168ce87c 2026-07-07 09:40:35 -0600
MDEV-39710: Update git modules WSREP Links to mariadb-corporation
Revision #a6a10baba9 2026-06-04 18:16:36 +0530
MDEV-40200 bound shift width in dyncol integer readers
Revision #5a38a85de5 2026-07-07 13:47:18 +0200
MDEV-39047 Impossible to create DB grant for long escaped DB name
Revision #736edbe77c 2026-06-26 16:30:13 +0200
MDEV-40159: single quote in DATA DIRECTORY breaks SHOW CREATE TABLE
Revision #526cf61d00 2026-06-10 18:40:22 +1000
MDEV-39829/MDEV-33532 s3.debug test failure
Revision #2c40efe5c0 2026-05-21 14:14:52 +1000
spelling correction: support-files/wsrep.cnf.sh
Revision #de39d3031c 2026-05-21 15:08:01 +1000
MDEV-39691 wsrep.cnf contains deprecated wsrep_causal_reads
Revision #fda9d85c06 2026-06-03 13:11:35 +1000
MDEV-39813 ST_GeomFromGeoJSON does not control recursion depth
Revision #24ee5fd6bf 2026-05-15 14:05:59 +1000
MDEV-28404 JSON functions don't respect KILL QUERY
Revision #0ff2fda7b3 2026-05-06 18:40:03 +1000
MDEV-30518: JSON functions cannot be killed on big-endian (backport)
Revision #29417cfe37 2023-11-10 16:01:15 +0530
MDEV-32726: Fix failing test for freebsd for json
Revision #2f46361ed6 2025-09-10 15:59:02 +1000
MDEV-37615: Clang based static analysis false postive reports on UNINIT_VAR
Revision #e558b406fe 2026-05-06 16:06:40 +1000
MDEV-39276: Assertion
0failed in json_find_path
Revision #8eda901893 2026-06-15 17:18:35 +0530
MDEV-39450: Memory corruption: overlapping memory ranges in
Field_longstr::compresson UPDATE of compressed column
Revision #8b27beead6 2026-06-17 09:38:33 +0300
MDEV-40056 : Analyze Galera Dynamic Variables Susceptible to RCEs
Revision #f139e20717 2026-06-15 11:59:29 +0300
MDEV-40027 : Galera Cluster-peer > Donor command execution
Revision #fcd3f81e08 2026-05-27 16:03:43 +0200
MDEV-37556 Memory leak in proxy protocol with name resolution enabled
Revision #70a88a6b6e 2026-06-02 13:08:07 +0530
MDEV-34998 Assertion
n_fields > n_cols || type & 32failed in dict_index_t::init_change_cols on ALTER
Revision #d404a47c25 2025-06-11 13:52:31 +0300
Add missing notify_state_change() in Wsrep_client_service.
Revision #8a7be7e9aa 2026-05-26 16:16:28 +0530
MDEV-38843: BF applier failed on a node causing complete Cluster lockup
Revision #160695101c 2026-05-28 09:24:11 +0300
MDEV-39344: Fix a TOCTOU race
Revision #34fd0fedc5 2026-05-28 09:24:06 +0300
MDEV-39344: fetch_data_into_cache() clears "is_truncated"
Revision #aefe48e6ef 2026-05-28 09:23:51 +0300
MDEV-39344: trx_disconnect_prepared() uses wrong mutex
Revision #760b57814f 2026-05-27 14:26:47 -0400
bump the VERSION
This page is licensed: CC BY-SA / Gnu FDL
Last updated
Was this helpful?