--- title: Still on MariaDB 10.6? Why your next upgrade is a... description: MariaDB Community Server 10.6 reached end of life on 6 July 2026, with its final build 10.6.28 released 13 August and no further patches coming. Every new... canonical: https://daily.dev/posts/still-on-mariadb-10-6-why-your-next-upgrade-is-a-security-decision-dttasdmow twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Still on MariaDB 10.6? Why your next upgrade is a security decision | daily.dev og:description: MariaDB Community Server 10.6 reached end of life on 6 July 2026, with its final build 10.6.28 released 13 August and no further patches coming. Every new... og:url: https://daily.dev/posts/still-on-mariadb-10-6-why-your-next-upgrade-is-a-security-decision-dttasdmow og:image: https://api.daily.dev/og/posts/dTTaSdmOw.png og:image:alt: Still on MariaDB 10.6? Why your next upgrade is a security decision og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Still on MariaDB 10.6? Why your next upgrade is a security decision **[MariaDB.org](https://daily.dev/sources/mariadb-foundation)** · 9 min read · 0 upvotes · 0 comments ## Summary MariaDB Community Server 10.6 reached end of life on 6 July 2026, with its final build 10.6.28 released 13 August and no further patches coming. Every new security fix now lands only in 10.11, 11.4, 11.8 and 12.3. October 2026 brought three CVSS 9.9 flaws, including a file-access bypass and a GIS heap overflow, patched in all maintained series but never in 10.6. MariaDB supports a direct one-step upgrade from 10.6 to 11.8 or 12.3, with no dump and reload needed and downtime of just a few minutes. WordPress core data from 2025 found 11% of MariaDB sites were already running an EOL version. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Is MariaDB 10.6 still receiving security updates? No, MariaDB Community Server 10.6 reached end of life on 6 July 2026 and its final release was 10.6.28, shipped 13 August 2026. All security fixes published afterward go only to 10.11, 11.4, 11.8 and 12.3. Three CVSS 9.9 vulnerabilities disclosed in October 2026, including a filename-encoding bypass enabling potential remote code execution, were patched in those versions but not in 10.6. _Teams tracking database CVEs and EOL timelines follow MariaDB and similar advisories on daily.dev._ ### Can I upgrade MariaDB directly from 10.6 to 11.8 without going through 10.11 or 11.4? Yes, MariaDB supports a direct one-step upgrade from 10.6 to either 11.8 or 12.3, with no intermediate hop needed. Data files are upgraded in place without a dump and reload, so downtime on a typical hosting node is just the time to stop the old server, swap packages, and start the new one, usually a few minutes. _Developers planning a database upgrade path can track MariaDB release and migration guidance on daily.dev._ ### Should I choose MariaDB 11.8 or 12.3 LTS for a new deployment? Pick 11.8 if you want a version already proven in production, GA for over a year, included natively in Debian 13 and Ubuntu 26.04, and maintained until June 2028. Pick 12.3 if you want the longest support runway from a single migration, since it is the newest LTS and maintained through May 2029. Both accept a direct upgrade from 10.6. _Comparing LTS release timelines like this helps teams choosing a database version via daily.dev._ ## Similar posts on daily.dev - [MariaDB Server 12.3, 11.8, 11.4 and 10.11 – Q3 2026 Maintenance Releases, and Goodbye 10.6](https://daily.dev/posts/mariadb-server-12-3-11-8-11-4-and-10-11-q3-2026-maintenance-releases-and-goodbye-10-6-xzt1mvtc8) · MariaDB.org · 0 upvotes · 0 comments - [The clock's ticking for MySQL 8.0 as end of life looms](https://daily.dev/posts/the-clock-s-ticking-for-mysql-8-0-as-end-of-life-looms-jasht3a4g) · The Register · 0 upvotes · 0 comments - [MySQL Galera Cluster EOL 2026: What to Decide Before September 30](https://daily.dev/posts/mysql-galera-cluster-eol-2026-what-to-decide-before-september-30-m8wwiymby) · Planet MySQL · 6 upvotes · 0 comments - [Stop using MySQL in 2026, it is not true open source](https://daily.dev/posts/stop-using-mysql-in-2026-it-is-not-true-open-source-wleltp3iy) · Lobsters · 95 upvotes · 8 comments - [MySQL 8.0 EOL Support: Your CVE Fixes Are Covered](https://daily.dev/posts/mysql-8-0-eol-support-your-cve-fixes-are-covered-fzyun39qr) · Percona Blog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#infrastructure](https://daily.dev/tags/infrastructure) [View this post on daily.dev](https://daily.dev/posts/still-on-mariadb-10-6-why-your-next-upgrade-is-a-security-decision-dttasdmow) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Still on MariaDB 10.6? Why your next upgrade is a security decision","url":"https://daily.dev/posts/still-on-mariadb-10-6-why-your-next-upgrade-is-a-security-decision-dttasdmow","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/still-on-mariadb-10-6-why-your-next-upgrade-is-a-security-decision-dttasdmow"},"datePublished":"2026-10-31T13:10:47.995Z","dateModified":"2026-10-31T13:11:17.703Z","description":"MariaDB Community Server 10.6 reached end of life on 6 July 2026, with its final build 10.6.28 released 13 August and no further patches coming. Every new...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f5c6a31f4c5cc603f2ad6870b23ea25b?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f5c6a31f4c5cc603f2ad6870b23ea25b?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"MariaDB.org","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"MariaDB.org","logo":"https://media.daily.dev/image/upload/s--onniydaR--/f_auto,q_auto/v1787487510/logos/mariadb-foundation?_a=BAMAMicg0","url":"https://daily.dev/sources/mariadb-foundation"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/still-on-mariadb-10-6-why-your-next-upgrade-is-a-security-decision-dttasdmow","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,infrastructure","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"MariaDB.org","item":"https://daily.dev/sources/mariadb-foundation"},{"@type":"ListItem","position":3,"name":"Still on MariaDB 10.6? Why your next upgrade is a security decision"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/still-on-mariadb-10-6-why-your-next-upgrade-is-a-security-decision-dttasdmow#faq","mainEntity":[{"@type":"Question","name":"Is MariaDB 10.6 still receiving security updates?","acceptedAnswer":{"@type":"Answer","text":"No, MariaDB Community Server 10.6 reached end of life on 6 July 2026 and its final release was 10.6.28, shipped 13 August 2026. All security fixes published afterward go only to 10.11, 11.4, 11.8 and 12.3. Three CVSS 9.9 vulnerabilities disclosed in October 2026, including a filename-encoding bypass enabling potential remote code execution, were patched in those versions but not in 10.6. Teams tracking database CVEs and EOL timelines follow MariaDB and similar advisories on daily.dev."}},{"@type":"Question","name":"Can I upgrade MariaDB directly from 10.6 to 11.8 without going through 10.11 or 11.4?","acceptedAnswer":{"@type":"Answer","text":"Yes, MariaDB supports a direct one-step upgrade from 10.6 to either 11.8 or 12.3, with no intermediate hop needed. Data files are upgraded in place without a dump and reload, so downtime on a typical hosting node is just the time to stop the old server, swap packages, and start the new one, usually a few minutes. Developers planning a database upgrade path can track MariaDB release and migration guidance on daily.dev."}},{"@type":"Question","name":"Should I choose MariaDB 11.8 or 12.3 LTS for a new deployment?","acceptedAnswer":{"@type":"Answer","text":"Pick 11.8 if you want a version already proven in production, GA for over a year, included natively in Debian 13 and Ubuntu 26.04, and maintained until June 2028. Pick 12.3 if you want the longest support runway from a single migration, since it is the newest LTS and maintained through May 2029. Both accept a direct upgrade from 10.6. Comparing LTS release timelines like this helps teams choosing a database version via daily.dev."}}]} ```