Skip to content
OpenAdvisories
Critical RHSA-2026:88864 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-backup 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-client-utils 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-common 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-connect-engine 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-cracklib-password-check 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-devel 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-embedded 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-embedded-devel 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-errmsg 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-gssapi-server 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-oqgraph-engine 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-pam 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-rocksdb-engine 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-s3-engine 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server-galera 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server-utils 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-sphinx-engine 3:10.11.18-4.1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-test 3:10.11.18-4.1.2.hum1

Vulnerabilities 1

  • Critical 9.9
    CVE-2026-85746

    MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive W…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-85746
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88864.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2554206
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-85746
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-85746
  • article
    https://github.com/MariaDB/server/commit/5c04ca5524385356ff7cf84974a7d491974c1f85
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-8fvj-c57c-pggx
  • article
    https://jira.mariadb.org/browse/MDEV-40329