Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:19182

Опубликовано: 28 мая 2026
Источник: rocky
Оценка: Moderate

Описание

Moderate: mariadb:11.8 security update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

  • MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function vulnerability (CVE-2026-32710)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
galeraaarch641.module+el9.8.0+40192+484cc2degalera-26.4.25-1.module+el9.8.0+40192+484cc2de.aarch64.rpm
mariadbaarch642.module+el9.8.0+40192+484cc2demariadb-11.8.6-2.module+el9.8.0+40192+484cc2de.aarch64.rpm
mariadb-backupaarch642.module+el9.8.0+40192+484cc2demariadb-backup-11.8.6-2.module+el9.8.0+40192+484cc2de.aarch64.rpm
mariadb-client-utilsnoarch2.module+el9.8.0+40192+484cc2demariadb-client-utils-11.8.6-2.module+el9.8.0+40192+484cc2de.noarch.rpm
mariadb-commonnoarch2.module+el9.8.0+40192+484cc2demariadb-common-11.8.6-2.module+el9.8.0+40192+484cc2de.noarch.rpm
mariadb-develaarch642.module+el9.8.0+40192+484cc2demariadb-devel-11.8.6-2.module+el9.8.0+40192+484cc2de.aarch64.rpm
mariadb-embeddedaarch642.module+el9.8.0+40192+484cc2demariadb-embedded-11.8.6-2.module+el9.8.0+40192+484cc2de.aarch64.rpm
mariadb-embedded-develaarch642.module+el9.8.0+40192+484cc2demariadb-embedded-devel-11.8.6-2.module+el9.8.0+40192+484cc2de.aarch64.rpm
mariadb-errmsgnoarch2.module+el9.8.0+40192+484cc2demariadb-errmsg-11.8.6-2.module+el9.8.0+40192+484cc2de.noarch.rpm
mariadb-gssapi-serveraarch642.module+el9.8.0+40192+484cc2demariadb-gssapi-server-11.8.6-2.module+el9.8.0+40192+484cc2de.aarch64.rpm

Показывать по

Связанные CVE

CVE-2026-32710

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2026-32710

CVSS3: 8.5
ubuntu
4 месяца назад

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

redhat логотип

CVE-2026-32710

CVSS3: 7.5
redhat
4 месяца назад

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

nvd логотип

CVE-2026-32710

CVSS3: 8.5
nvd
4 месяца назад

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

debian логотип

CVE-2026-32710

CVSS3: 8.5
debian
4 месяца назад

MariaDB server is a community developed fork of MySQL server. An authe ...

suse-cvrf логотип

openSUSE-SU-2026:20629-1

suse-cvrf
3 месяца назад

Security update for mariadb