Skip to content
OpenAdvisories
High RHSA-2026:84689 16 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Oct 20, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-backup 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-client-utils 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-common 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-connect-engine 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-cracklib-password-check 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-devel 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-duckdb-engine 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-embedded 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-embedded-devel 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-errmsg 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-gssapi-server 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-oqgraph-engine 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-pam 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-rocksdb-engine 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-s3-engine 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-server 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-server-galera 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-server-utils 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-sphinx-engine 3:11.8.9-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb11.8-test 3:11.8.9-0.1.hum1

Vulnerabilities 16

  • High 8.8
    CVE-2026-97380

    MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, c…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux
  • High 8.5
    CVE-2026-107815

    MariaDB: one byte OOB write in DOS tables of the CONNECT engine

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack bu…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 8.4
    CVE-2026-107814

    MariaDB: Insecure $HOME in MariaDB rpm packages

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A …

    MariaDB server mariadb-10.3 mariadb-10.0 Ubuntu
  • High 8.4
    CVE-2026-107818

    MariaDB: environment injection via wsrep bootstrap in the mariadb.service file

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE priv…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 8.0
    CVE-2026-102523

    MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

    MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in files…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 8.0
    CVE-2026-107821 Public exploit

    MariaDB: insufficient validation of binary frm data when opening a table

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM fi…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 7.7
    CVE-2026-86047

    MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers an…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 7.2
    CVE-2026-107823

    MariaDB: privilege escalation via incorrect view frm parsing

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER an…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 6.6
    CVE-2026-60585

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

    Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  • Medium 6.4
    CVE-2026-107816

    MariaDB: `qc_info` plugin can do OOB reads if query contains \0

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 6.4
    CVE-2026-107822

    MariaDB: database privilege escalation via user / role name collision in the acl cache

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched bec…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 6.4
    CVE-2026-60331

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

    Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  • Medium 5.4
    CVE-2026-85985

    MariaDB: Unauthorized file access via CONNECT engine UDFs

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs json_file(), bson_file(), jfile_make(), bfile_make(), and jbin_file() are affect…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 4.4
    CVE-2026-107817

    MariaDB: mysql_json plugin OOB reads

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 4.3
    CVE-2026-85745

    MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond the allocated buffer when processing invalid WKB for a MultiPolygon because the multi-polygon parser a…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Low 2.7
    CVE-2026-61081

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Suppo…

    Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-97380
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-86047
  • report
    https://access.redhat.com/security/cve/CVE-2026-85985
  • report
    https://access.redhat.com/security/cve/CVE-2026-85745
  • report
    https://access.redhat.com/security/cve/CVE-2026-107823
  • report
    https://access.redhat.com/security/cve/CVE-2026-107816
  • report
    https://access.redhat.com/security/cve/CVE-2026-107815
  • report
    https://access.redhat.com/security/cve/CVE-2026-107821
  • report
    https://access.redhat.com/security/cve/CVE-2026-107822
  • report
    https://access.redhat.com/security/cve/CVE-2026-107817
  • report
    https://access.redhat.com/security/cve/CVE-2026-107818
  • report
    https://access.redhat.com/security/cve/CVE-2026-107814
  • report
    https://access.redhat.com/security/cve/CVE-2026-60331
  • report
    https://access.redhat.com/security/cve/CVE-2026-60585
  • report
    https://access.redhat.com/security/cve/CVE-2026-61081
  • report
    https://access.redhat.com/security/cve/CVE-2026-102523
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84689.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2504855
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-60331
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-60331
  • article
    https://www.oracle.com/security-alerts/cpujul2026.html
  • article
    https://www.oracle.com/security-alerts/cpujul2026.html#AppendixMSQL
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2505923
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-60585
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-60585
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2504779
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-61081
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-61081
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2553280
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-85745
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-85745
  • article
    https://hackerone.com/reports/3856148
  • article
    https://jira.mariadb.org/browse/MDEV-40328
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2554196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-85985
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-85985
  • article
    https://github.com/MariaDB/server/commit/4f66ca1b69daf1b7e6a562ca8e86d77a6a70abfe