Security support for end-of-life MariaDB
MariaDB 10.6 reached end of life on 6 July 2026, and CentOS, Debian and Amazon Linux ship releases older still. These are the versions in use, with every vulnerability the US National Vulnerability Database lists for them.
Request a server assessmentMariaDB versions past end of life
| MariaDB | Ships with | End of life | Known CVEs | Critical | Exploited | Forkward |
|---|---|---|---|---|---|---|
| 5.5.68 | CentOS 7, RHEL 7, Oracle Linux 7 and Amazon Linux 2 | 11 April 2020 | 18 | 0 | 0 | Patch on order, 48 h |
| 10.3.28 | CentOS 8 | 25 May 2023 | 57 | 0 | 0 | Patch on order, 48 h |
| 10.3.39 | Debian 10 | 25 May 2023 | 2 | 0 | 0 | Patch on order, 48 h |
| 10.4.34 | Last MariaDB 10.4 release | 18 June 2024 | 2 | 0 | 0 | Patch on order, 48 h |
| 10.5.29 | Debian 11 | 24 June 2025 | 2 | 0 | 0 | Patch on order, 48 h |
| 10.6.28 | Last MariaDB 10.6 release | 6 July 2026 | 1 | 0 | 0 | Patch on order, 48 h |
Vulnerabilities from the US National Vulnerability Database, 28 October 2026, for the upstream version, counting only entries where MariaDB itself is the vulnerable product. Exploited: listed in the CISA catalogue of known exploited vulnerabilities. Package versions from each distribution's public repositories. Distribution builds include some vendor fixes; your assessment shows which risks are real.
Managed databases
On Amazon RDS or Azure, the provider controls the engine and charges for extended support. We patch the databases you run on your own servers and virtual machines. All databases
Patch on order, 48 h
We backport the fix to the version you run within 48 hours of your order, or within 24 hours with priority delivery. See the plans