Skip to content
OpenAdvisories
High RHSA-2026:84701 6 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Oct 20, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-backup 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-client-utils 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-common 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-connect-engine 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-cracklib-password-check 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-devel 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-embedded 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-embedded-devel 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-errmsg 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-gssapi-server 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-oqgraph-engine 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-pam 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-rocksdb-engine 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-s3-engine 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server-galera 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server-utils 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-sphinx-engine 0:10.11.18-4.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-test 0:10.11.18-4.1.1.hum1

Vulnerabilities 6

  • High 8.8
    CVE-2026-97380

    MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, c…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux
  • High 8.4
    CVE-2026-107814

    MariaDB: Insecure $HOME in MariaDB rpm packages

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A …

    MariaDB server mariadb-10.3 mariadb-10.0 Ubuntu
  • High 7.7
    CVE-2026-86047

    MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers an…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 7.2
    CVE-2026-107823

    MariaDB: privilege escalation via incorrect view frm parsing

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER an…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 5.4
    CVE-2026-85985

    MariaDB: Unauthorized file access via CONNECT engine UDFs

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs json_file(), bson_file(), jfile_make(), bfile_make(), and jbin_file() are affect…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 4.3
    CVE-2026-85745

    MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond the allocated buffer when processing invalid WKB for a MultiPolygon because the multi-polygon parser a…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-107814
  • report
    https://access.redhat.com/security/cve/CVE-2026-107823
  • report
    https://access.redhat.com/security/cve/CVE-2026-85745
  • report
    https://access.redhat.com/security/cve/CVE-2026-85985
  • report
    https://access.redhat.com/security/cve/CVE-2026-86047
  • report
    https://access.redhat.com/security/cve/CVE-2026-97380
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84701.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2553280
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-85745
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-85745
  • article
    https://hackerone.com/reports/3856148
  • article
    https://jira.mariadb.org/browse/MDEV-40328
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2554196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-85985
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-85985
  • article
    https://github.com/MariaDB/server/commit/4f66ca1b69daf1b7e6a562ca8e86d77a6a70abfe
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-2245-9hm3-wxf6
  • article
    https://jira.mariadb.org/browse/MDEV-40323
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2554208
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-86047
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-86047
  • article
    https://github.com/MariaDB/server/commit/2b28d1c424104429eeed43115ee6d8a803671d52
  • article
    https://github.com/MariaDB/server/commit/3646569225758c8225e7342783d775ef7c7570e5
  • article
    https://github.com/MariaDB/server/commit/5acb43522863c9bd6b91f354104ea247bf513e9a
  • article
    https://github.com/MariaDB/server/commit/9d4ffe23b25808f7858b2dc48106fbd60cf0e513
  • article
    https://github.com/MariaDB/server/commit/d5d741a3076f911b468518d6b06a917593498c5b
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-wxr3-wm3p-7w6p
  • article
    https://jira.mariadb.org/browse/MDEV-39776
  • article
    https://jira.mariadb.org/browse/MDEV-39818
  • article
    https://jira.mariadb.org/browse/MDEV-40308
  • article
    https://jira.mariadb.org/browse/MDEV-40311