Release Notes for MariaDB Enterprise Server 10.6.27-23
MariaDB Enterprise Server 10.6.27-23 is a Stable (GA) maintenance release of MariaDB Enterprise Server 10.6, released on 2026-06-26
Download Changelog Overview of Enterprise Server 10.6
Release date: 26 Jun 2026
MariaDB Enterprise Server 10.6.27-23 is a Stable (GA) maintenance release of MariaDB Enterprise Server 10.6. This release includes a variety of fixes.
Fixed Security Vulnerabilities
Full list of Fixed Security Vulnerabilities in MariaDB Enterprise Server
Changes in Storage Engines
This release incorporates MariaDB ColumnStore engine version 25.10.5
Notable changes
Galera updated to 26.4.27
Proxy protocol connections from remote host leaked memory, if DNS name resolution is allowed (skip_name_resolve is not set) (MENT-2685)
Issues Fixed
Can result in data loss
Crash recovery may fail after a crash during an instant ALTER TABLE…PAGE_COMPRESSED=1. Fix: make the operation rebuild the table. (MDEV-38079)
Replica updates table to wrong values, further replication failures (MDEV-38731)
Can result in hang or crash
Fixed a crash in InnoDB when processing long or encoded database names in Foreign Keys (MDEV-24356)
Fixed a server crash that could occur during query optimization when a stored procedure queries a view containing CONCAT or GROUP_CONCAT functions. (MDEV-36678)
Warning: Memory not freed: 32" after server shutdown when SELECT COLUMN_JSON() has been used (MDEV-36929)
PAGE_COMPRESSED ALTER TABLE operations inconsistent with innodb_file_per_table setting (MDEV-37886)
CREATE TABLE ... SELECT on mysql.innodb_table_stats can hang (MDEV-38822)
Fixed a server assertion that occurred when an InnoDB DDL operation (such as ALTER TABLE) encountered a lock wait timeout during internal statistics updates. (MDEV-38882)
JSON search functions, JSON_EXISTS, JSON_EXTRACT, JSON_VALUE, JSON_QUERY, JSON_CONTAINS, JSON_CONTAINS_PATH, JSON_ARRAY_APPEND, JSON_ARRAY_INSERT, JSON_LENGTH, JSON_INSERT, JSON_REMOVE, JSON_KEYS, could result in a overwrite of memory resulting in a crash. (MDEV-39213)
Fixed critical crashes in InnoDB purge threads when processing tables with indexed virtual columns. Resolved race conditions where purge workers incorrectly reused cached TABLE* objects across different tables in the same batch, and added retry logic to handle concurrent DDL operations that could invalidate table handles during purge processing. (MDEV-39261)
By inserting a crafted large JSON value into the mysql.global_priv table and triggering FLUSH PRIVILEGES, the server can crash (MDEV-39266)
Fix crash in prepared statement using DEFAULT with sequence in its second execution. (MDEV-39265)
When JSON_SCHEMA_VALID() is used with a long enum, the server can crash (MENT-2615)
Potential MariaDB Cluster hang when a DDL command or Sequence access is replicated to a cluster by async replication (MENT-2670, MDEV-38260)
Can result in unexpected behaviour
Empty string is erroneously allowed as a GEOMETRY column value (MDEV-15479)
Fixes the issue occurred when ALTER TABLE contained duplicate DROP FOREIGN KEY operations (e.g., "DROP FOREIGN KEY f1, DROP FOREIGN KEY f1"). (MDEV-19194)
The Debian helper script previous tried to CHECK TABLE on all Aria/MyiSAM tables. The discovery and execution though a combination of bash and SQL escaping that resulted in incorrect table names being checked in a variety of situtions. Because Aria has crash recovery the Debian's auto-check table on startup functionality was removed. (MDEV-34902)
Fix InnoDB index corruption when renaming key names with case-only differences. (MDEV-34951)
Parallel replication hang and stall due to incorrectly handled row lock conflict, missing deadlock kill (MDEV-37133)
Fixed mariabackup to report my_close() failures and prevent false success messages when disk space is exhausted. (MDEV-38562)
An UPDATE could fail to return the error ER_CHECKREAD when innodb_snapshot_isolation=ON and the transaction that had last modified the record was committed during the lock acquisition. (MDEV-39263)
mbstream insufficient path validation (MDEV-39408)
wsrep unsafe handling of parameters (MDEV-39413)
FILE privilege isn't checked for derived table (MDEV-39493)
A parameter-injection gap existed in wsrep_sst_rsync because it failed to validate the joiner-supplied WSREP_SST_OPT_REMOTE_USER and WSREP_SST_OPT_REMOTE_PSWD values before interpolating them into the donor-written stunnel.conf and the rsync magic file. (MDEV-39648)
The wsrep_notify_cmd functionality was susceptible to a parameter-injection vulnerability, as it failed to validate the peer-supplied wsrep_node_name and wsrep_node_incoming_address values before interpolating them into the notification command line. (MDEV-39721)
An appropriately privileged user (with SUPER privileges) could execute shell commands as the uid of the mariadbd process because the values of the system variables wsrep_sst_donor and wsrep_sst_receive_address, which can be modified at runtime, were not properly sanitized when used to construct a shell command. (MDEV-39676)
An appropriately privileged user (with SUPER or SYSTEM_VARIABLES_ADMIN privileges) could execute shell commands as the uid of the mariadbd process because the values of the system variable wsrep_sst_auth , which can be modified at runtime, were not properly sanitized when used to construct a shell command. (MENT-2692)
An appropriately privileged user (with SUPER or SYSTEM_VARIABLES_ADMIN privileges) could execute shell commands as the uid of the mariadbd process because the values of the system variable wsrep_sst_node_address , which can be modified at runtime, were not properly sanitized when used to construct a shell command. (MENT-2693)
A MariaDB Enterprise Cluster SST is not possible with datadir locatated on NFS and log-bin enabled (MENT-2435)
If wsrep_restart_slave is used the MariaDB Enterprise Cluster replica node may hang during shutdown. (MENT-2564)
Related to install and upgrade
On a system where RLIMIT_AS is limited, or in some ARMv8 environments where the virtual address size is 39 bits, InnoDB could fail to start up with the default value of innodb_buffer_pool_size_max. (MENT-2560)
Unexpected results
Change the "-0" results in many SELECT scenarios to just return "0". (MDEV-38670)
wsrep_slave_FK_checks configuration option was deprecated and from now on has no effect. Slave foreign key checks are always on as otherwise leads to massive data inconsistency on all replicas which subsequently results in master node abort. (MDEV-39385)
Changelog
For the complete list of changes in this release, see the changelog.
Platforms
In alignment to the enterprise lifecycle, MariaDB Enterprise Server 10.6.27-23 is provided for:
AlmaLinux 8 (x86_64, ARM64)
AlmaLinux 9 (x86_64, ARM64)
Debian 11 (x86_64, ARM64)
Debian 12 (x86_64, ARM64)
Oracle Linux 8 (x86_64, ARM64)
Oracle Linux 9 (x86_64, ARM64)
Red Hat Enterprise Linux 8 (x86_64, ARM64)
Red Hat Enterprise Linux 9 (x86_64, ARM64, PPC64LE)
Rocky Linux 8 (x86_64, ARM64)
Rocky Linux 9 (x86_64, ARM64)
SUSE Linux Enterprise Server 12 (x86_64)
SUSE Linux Enterprise Server 15 (x86_64, ARM64)
Ubuntu 22.04 (x86_64, ARM64)
Ubuntu 24.04 (x86_64, ARM64)
Microsoft Windows (x86_64) (Without MariaDB Enterprise Cluster (Galera) support)
Red Hat UBI 8 (x86_64, ARM64)
Red Hat UBI 8 is part of the Enterprise Server Docker Image. It does not support MariaDB Enterprise Cluster (Galera) or MariaDB ColumnStore.
Some components of MariaDB Enterprise Server are supported on a subset of platforms. See MariaDB Engineering Policies for details.
Installation Instructions
Upgrade Instructions
This page is: Copyright © 2025 MariaDB. All rights reserved.
Last updated
Was this helpful?