Changelog for MariaDB Enterprise Server 10.6.27-23

MariaDB Enterprise Server 10.6.27-23 is a Stable (GA) maintenance release of MariaDB Enterprise Server 10.6, released on 2026-06-26

Download Release Notes Overview of Enterprise Server 10.6

Release date: 26 Jun 2026

Issues Fixed

The Debian helper script previous tried to CHECK TABLE on all Aria/MyiSAM tables. The discovery and execution though a combination of bash and SQL escaping that resulted in incorrect table names being checked in a variety of situtions. Because Aria has crash recovery the Debian's auto-check table on startup functionality was removed. (MDEV-34902)
invalid SRCDEF value could crash a CONNECT table (MDEV-38892)
JSON search functions, JSON_EXISTS, JSON_EXTRACT, JSON_VALUE, JSON_QUERY, JSON_CONTAINS, JSON_CONTAINS_PATH, JSON_ARRAY_APPEND, JSON_ARRAY_INSERT, JSON_LENGTH, JSON_INSERT, JSON_REMOVE, JSON_KEYS, could result in a overwrite of memory resulting in a crash. (MDEV-39213)
Fixed critical crashes in InnoDB purge threads when processing tables with indexed virtual columns. Resolved race conditions where purge workers incorrectly reused cached TABLE* objects across different tables in the same batch, and added retry logic to handle concurrent DDL operations that could invalidate table handles during purge processing. (MDEV-39261)
FILE privilege isn't checked for derived table (MDEV-39493)
An appropriately privileged user (with SUPER privileges) could execute shell commands as the uid of the mariadbd process because the values of the system variables wsrep_sst_donor and wsrep_sst_receive_address, which can be modified at runtime, were not properly sanitized when used to construct a shell command. (MDEV-39676)
When JSON_SCHEMA_VALID() is used with a long enum, the server can crash (MENT-2615)
Potential MariaDB Cluster hang when a DDL command or Sequence access is replicated to a cluster by async replication (MENT-2670)
proxy protocol connections from remote host leaked memory, if DNS name resolution is allowed (skip_name_resolve is not set) (MENT-2685)
An appropriately privileged user (with SUPER or SYSTEM_VARIABLES_ADMIN privileges) could execute shell commands as the uid of the mariadbd process because the values of the system variable wsrep_sst_auth , which can be modified at runtime, were not properly sanitized when used to construct a shell command. (MENT-2692)
An appropriately privileged user (with SUPER or SYSTEM_VARIABLES_ADMIN privileges) could execute shell commands as the uid of the mariadbd process because the values of the system variable wsrep_sst_node_address , which can be modified at runtime, were not properly sanitized when used to construct a shell command. (MENT-2693)
Fix InnoDB index corruption when renaming key names with case-only differences. (MDEV-34951)
Fixed a server crash that could occur during query optimization when a stored procedure queries a view containing CONCAT or GROUP_CONCAT functions. (MDEV-36678)
Warning: Memory not freed: 32" after server shutdown when SELECT COLUMN_JSON() has been used (MDEV-36929)
Parallel replication hang and stall due to incorrectly handled row lock conflict, missing deadlock kill (MDEV-37133)
PAGE_COMPRESSED ALTER TABLE operations inconsistent with innodb_file_per_table setting (MDEV-37886)
Fixed mariabackup to report my_close() failures and prevent false success messages when disk space is exhausted. (MDEV-38562)
Change the "-0" results in many SELECT scenarios to just return "0". (MDEV-38670)
Replica updates table to wrong values, further replication failures (MDEV-38731)
CREATE TABLE ... SELECT on mysql.innodb_table_stats can hang (MDEV-38822)
Fixed a server assertion that occurred when an InnoDB DDL operation (such as ALTER TABLE) encountered a lock wait timeout during internal statistics updates. (MDEV-38882)
An UPDATE could fail to return the error ER_CHECKREAD when innodb_snapshot_isolation=ON and the transaction that had last modified the record was committed during the lock acquisition. (MDEV-39263)
By inserting a crafted large JSON value into the mysql.global_priv table and triggering FLUSH PRIVILEGES, the server can crash (MDEV-39266)
mbstream insufficient path validation (MDEV-39408)
wsrep unsafe handling of parameters (MDEV-39413)
A parameter-injection gap existed in wsrep_sst_rsync because it failed to validate the joiner-supplied WSREP_SST_OPT_REMOTE_USER and WSREP_SST_OPT_REMOTE_PSWD values before interpolating them into the donor-written stunnel.conf and the rsync magic file. (MDEV-39648)
The wsrep_notify_cmd functionality was susceptible to a parameter-injection vulnerability, as it failed to validate the peer-supplied wsrep_node_name and wsrep_node_incoming_address values before interpolating them into the notification command line. (MDEV-39721)
A MariaDB Enterprise Cluster SST is not possible with datadir locatated on NFS and log-bin enabled (MENT-2435)
If wsrep_restart_slave is used the MariaDB Enterprise Cluster replica node may hang during shutdown. (MENT-2564)
Empty string is erroneously allowed as a GEOMETRY column value (MDEV-15479)
Fixes the issue occurred when ALTER TABLE contained duplicate DROP FOREIGN KEY operations (e.g., "DROP FOREIGN KEY f1, DROP FOREIGN KEY f1"). (MDEV-19194)
Fixed a crash in InnoDB when processing long or encoded database names in Foreign Keys (MDEV-24356)
Crash recovery may fail after a crash during an instant ALTER TABLE…PAGE_COMPRESSED=1. Fix: make the operation rebuild the table. (MDEV-38079)
Fix crash in prepared statement using DEFAULT with sequence in its second execution. (MDEV-39265)
wsrep_slave_FK_checks configuration option was deprecated and from no on has no effect. Slave foreign key checks are always on as otherwise leads to massive data inconsistency on all replicas which subsequently results in master node abort. (MDEV-39385)
On a system where RLIMIT_AS is limited, or in some ARMv8 environments where the virtual address size is 39 bits, InnoDB could fail to start up with the default value of innodb_buffer_pool_size_max. (MENT-2560)

Last updated 10 days ago

Was this helpful?