rpm package
almalinux/mariadb11.8-server-utils
pkg:rpm/almalinux/mariadb11.8-server-utils
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-103111 | Hig | 7.6 | < 3:11.8.8-2.el10_2.alma.2 | 3:11.8.8-2.el10_2.alma.2 | Sep 30, 2026 | PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data. | |
| CVE-2026-89161 | Hig | 7.4 | < 3:11.8.8-2.el10_2.alma.2 | 3:11.8.8-2.el10_2.alma.2 | Sep 11, 2026 | In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. | |
| CVE-2026-86145 | Hig | 8.2 | < 3:11.8.8-2.el10_2.alma.2 | 3:11.8.8-2.el10_2.alma.2 | Sep 5, 2026 | PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attac | |
| CVE-2026-49261 | Cri | 10.0 | < 3:11.8.8-1.el10_2 | 3:11.8.8-1.el10_2 | Jun 11, 2026 | MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node |
- affected < 3:11.8.8-2.el10_2.alma.2fixed 3:11.8.8-2.el10_2.alma.2
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.
- affected < 3:11.8.8-2.el10_2.alma.2fixed 3:11.8.8-2.el10_2.alma.2
In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.
- affected < 3:11.8.8-2.el10_2.alma.2fixed 3:11.8.8-2.el10_2.alma.2
PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attac
- affected < 3:11.8.8-1.el10_2fixed 3:11.8.8-1.el10_2
MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node