Skip to main content

Why doesn't MariaDB in WHM/cPanel update to the latest version?

Answered
RuneServer
  • Edited

Hi,

I'm running MariaDB 10.6.19. However, according to the official MariaDB website, the latest release in the 10.6 branch is 10.6.27, but my server doesn't update automatically: https://mariadb.com/docs/release-notes/community-server/10.6/10.6.27

When I go to WHM/cPanel -> MySQL/MariaDB Upgrade, the only available option is "MariaDB 10.6". There are no options to select a newer patch release.

Is this normal?

I'm running WHM/cPanel 110.0.136 and CloudLinux 7, both updated every day.

Thank you very much. Have a nice day.

Comments

12 comments

Date Votes
  • cPRex Jurassic Moderator

    Hey there!  cPanel version 110 is only receiving the most critical security updates at this point and not general software updates, so you aren't going to be getting new data on that system.

    We have a list of what database version is supported on modern operating systems here:

    https://docs.cpanel.net/knowledge-base/general-systems-administration/supported-mysql-mariadb-versions/

    I would *strongly* recommend updating or migrating that machine to a more modern operating system, as the database version isn't the only thing out of date there.

     

    0
  • RuneServer

    The MariaDB versions from 10.6.19 to 10.6.27 solve security issues, isn't a big update, only is a simple patch.

    Thank you very much.

    0
  • cPRex Jurassic Moderator

    That sounds right, but it doesn't change the fact that version 110 is only getting critical security updates as part of the Extended Life Cycle release process.  

    0
  • RuneServer

    Hi cPRex,

    Sorry for my poor English.

    MariaDB 10.6.27 fixes this critical security vulnerability with a CVSS score of 10/10:
    https://www.cve.org/CVERecord?id=CVE-2026-49261

    Could you please check with the developers about applying this update to WHM/cPanel?

    The update was released 46 days ago, on June 11, 2026.

    Thank you very much. Have a nice day!

    0
  • cPRex Jurassic Moderator

    I spoke with the team about this and confirmed that the MariaDB package is handled by the operating system itself, so we don't build custom packages for MariaDB.  If you check a version 110 server you can see this with the following command, which shows they are not custom packages that we created:

    # rpm -qa | grep MariaDB
    MariaDB-compat-10.6.19-1.el7.centos.x86_64
    MariaDB-common-10.6.19-1.el7.centos.x86_64
    MariaDB-server-10.6.19-1.el7.centos.x86_64
    MariaDB-client-10.6.19-1.el7.centos.x86_64
    MariaDB-devel-10.6.19-1.el7.centos.x86_64
    MariaDB-shared-10.6.19-1.el7.centos.x86_64

    Since these aren't available from the OS the only option would be a manual installation, which could break other areas of the system.

    The best thing you can do is to get off that machine and onto something newer.

    0
  • RuneServer

    I'll talk with CloudLinux for get more information.

    Thank you very much.

    0
  • RuneServer
    • Edited

    Good afternoon,

    After speaking with CloudLinux, they informed me that the installed version is the default one provided with WHM/cPanel. CloudLinux is not involved in updating MariaDB:

    MariaDB on your servers is installed and managed through cPanel/WHM using MariaDB's own repositories.

    In that case, Can WHM/cPanel enable the upgrade of MariaDB from version 10.6.19 to 10.6.27 to resolve this critical vulnerability?, or isn't possible?

    Thank you very much for your time.

    Kind regards,

    0
  • cPRex Jurassic Moderator

    Can you share the output of this command?

    yum whatprovides MariaDB-server
    0
  • RuneServer

    Hi,

    This is the result:

    # yum whatprovides MariaDB-server
    Complementos cargados:fastestmirror, langpacks, universal-hooks, versionlock
    Loading mirror speeds from cached hostfile
     * cpanel-addons-production-feed: 89.222.122.167
     * cpanel-plugins: 89.222.122.167
     * cloudlinux-x86_64-server-7: swng.cloudlinux.eu-fin.cl-mirror.net
     * epel: ftp-stud.hs-esslingen.de
    MariaDB-server-10.6.19-1.el7.centos.x86_64 : MariaDB database server binaries
    Repositorio        : MariaDB106

    MariaDB-server-10.6.19-1.el7.centos.x86_64 : MariaDB database server binaries
    Repositorio        : @MariaDB106

    Thank you.

    0
  • cPRex Jurassic Moderator

    Thanks for that information.  It seems like we're both correct - CloudLinux is saying the package comes from the MariaDB repositories, and that cPanel doesn't manage them.

    If you wanted to work with CloudLinux to setup the ELS tools for MariaDB as outlined here:

    https://cloudlinux.com/endless-lifecycle-support-for-hosting/mariadb/

    you would continue to receive security updates for those packages, although those do come at an additional cost.

    0
  • RuneServer

    Thank you very much.

    Have a nice day.

    0
  • cPRex Jurassic Moderator

    You're very welcome!

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post