Skip to content
OpenAdvisories
High RHSA-2026:83108 8 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Oct 15, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-backup 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-client-utils 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-common 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-connect-engine 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-cracklib-password-check 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-devel 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-embedded 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-embedded-devel 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-errmsg 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-gssapi-server 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-oqgraph-engine 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-pam 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-rocksdb-engine 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-s3-engine 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server-galera 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server-utils 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-sphinx-engine 0:10.11.18-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-test 0:10.11.18-4.1.hum1

Vulnerabilities 8

  • High 8.5
    CVE-2026-107815

    MariaDB: one byte OOB write in DOS tables of the CONNECT engine

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack bu…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 8.4
    CVE-2026-107814

    MariaDB: Insecure $HOME in MariaDB rpm packages

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A …

    MariaDB server mariadb-10.3 mariadb-10.0 Ubuntu
  • High 8.4
    CVE-2026-107818

    MariaDB: environment injection via wsrep bootstrap in the mariadb.service file

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE priv…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 8.0
    CVE-2026-107821 Public exploit

    MariaDB: insufficient validation of binary frm data when opening a table

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM fi…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 7.2
    CVE-2026-107823

    MariaDB: privilege escalation via incorrect view frm parsing

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER an…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 6.4
    CVE-2026-107816

    MariaDB: `qc_info` plugin can do OOB reads if query contains \0

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 6.4
    CVE-2026-107822

    MariaDB: database privilege escalation via user / role name collision in the acl cache

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched bec…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 4.4
    CVE-2026-107817

    MariaDB: mysql_json plugin OOB reads

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-107814
  • report
    https://access.redhat.com/security/cve/CVE-2026-107815
  • report
    https://access.redhat.com/security/cve/CVE-2026-107816
  • report
    https://access.redhat.com/security/cve/CVE-2026-107817
  • report
    https://access.redhat.com/security/cve/CVE-2026-107818
  • report
    https://access.redhat.com/security/cve/CVE-2026-107821
  • report
    https://access.redhat.com/security/cve/CVE-2026-107822
  • report
    https://access.redhat.com/security/cve/CVE-2026-107823
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83108.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2548712
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-107814
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-107814
  • article
    https://github.com/MariaDB/server/commit/d842d6e994a8b0d67c280bf785a11357d6b316a2
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-m5gf-432r-g5jw
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2548718
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-107815
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-107815
  • article
    https://github.com/MariaDB/server/commit/b369925f6855d3e1f0ebcf453492724b99fda6f8
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-4wgx-ffg9-jrwq
  • article
    https://jira.mariadb.org/browse/MDEV-40637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2548739
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-107816
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-107816
  • article
    https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6
  • article
    https://jira.mariadb.org/browse/MDEV-40670
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2548737
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-107817
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-107817
  • article
    https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc