RLSA-2026:84799
RLSA-2026:84799 · Important: mariadb11.8 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es): * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions (CVE-2026-86145) * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161) * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 8.2 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
mariadb11.8 Rocky Linux:10
- Affected ranges
- ECOSYSTEM: < 3:11.8.8-2.el10_2
Update to 3:11.8.8-2.el10_2