Skip to content
OpenAdvisories
High RHSA-2026:97938 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-backup 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-client-utils 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-common 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-connect-engine 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-cracklib-password-check 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-devel 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-embedded 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-embedded-devel 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-errmsg 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-gssapi-server 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-oqgraph-engine 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-pam 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-rocksdb-engine 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-s3-engine 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server-galera 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-server-utils 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-sphinx-engine 3:10.11.18-4.1.11.hum1
Red Hat · Hardened Images 1 hummingbird:1 mariadb10.11-test 3:10.11.18-4.1.11.hum1

Vulnerabilities 1

  • High 8.0
    CVE-2026-102523

    MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

    MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in files…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-102523
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_97938.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2567501
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-102523
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-102523
  • article
    https://github.com/MariaDB/server/commit/98437c30ae52ed709f266e5f8095d779261a5879
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3
  • article
    https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2
  • article
    https://github.com/MariaDB/server/security/advisories/GHSA-h4vr-wpff-jfx4
  • article
    https://jira.mariadb.org/browse/MDEV-40413