Skip to content
OpenAdvisories
Medium RLSA-2026:19182 1 CVE

Moderate: mariadb:11.8 security update

Published May 28, 2026 · Updated May 28, 2026

Ecosystem: Rocky Linux

Summary

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

* MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function vulnerability (CVE-2026-32710)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 2

ReleasePackageFixed in
Rocky Linux · 9 galera 0:26.4.25-1.module+el9.8.0+40192+484cc2de
Rocky Linux · 9 mariadb 3:11.8.6-2.module+el9.8.0+40192+484cc2de

Vulnerabilities 1

  • High 8.6
    CVE-2026-32710 Public exploit

    Heap-based Buffer Overflow in MariaDB

    MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the cras…

    MariaDB server mariadb mariadb Debian Ubuntu Wolfi

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2449711