Summary
[3:11.8.8-2]
- Release bump for pcre2 CVE fixes
- Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | mariadb11.8 | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-backup | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-client-utils | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-common | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-devel | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-embedded | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-embedded-devel | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-errmsg | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-gssapi-server | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-oqgraph-engine | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-pam | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-server | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-server-galera | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-server-utils | 3:11.8.8-2.el10_2 |
| Oracle Linux · 10 | mariadb11.8-test | 3:11.8.8-2.el10_2 |
Vulnerabilities 3
-
High 8.2
PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursi…
-
High 7.6
PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of…
-
High 7.4
In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrec…