RHSA-2026:84689
Vulnerability from csaf_redhat - Published: 2026-10-19 06:08 - Updated: 2026-10-20 20:43Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
mariadb11.8:
* mariadb11.8-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-backup-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-client-utils-11.8.9-0.1.hum1 (noarch)
* mariadb11.8-common-11.8.9-0.1.hum1 (noarch)
* mariadb11.8-connect-engine-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-cracklib-password-check-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-devel-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-duckdb-engine-11.8.9-0.1.hum1 (aarch64, x86_64)
* mariadb11.8-embedded-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-embedded-devel-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-errmsg-11.8.9-0.1.hum1 (noarch)
* mariadb11.8-gssapi-server-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-oqgraph-engine-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-pam-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-rocksdb-engine-11.8.9-0.1.hum1 (x86_64)
* mariadb11.8-s3-engine-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-server-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-server-galera-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-server-utils-11.8.9-0.1.hum1 (noarch)
* mariadb11.8-sphinx-engine-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-test-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)
* mariadb11.8-11.8.9-0.1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in MariaDB. An authenticated database user can exploit an out-of-bounds read vulnerability by supplying a specially crafted spatial geometry to the ST_Area function. This issue allows reading beyond allocated memory buffers, leading to unauthorized information disclosure of internal process memory. An attacker could use this disclosed data to facilitate further attacks, such as bypassing security protections like Address Space Layout Randomization (ASLR).
4.3 (Medium)
Affected products
Fixed
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in MariaDB. Certain file-access User-Defined Functions (UDFs) within the CONNECT storage engine do not properly enforce user privileges or directory restrictions when handling file system paths. An authenticated, low-privileged database user can exploit this vulnerability to read from or write to unauthorized files on the underlying server, subject to the database process's operating system permissions.
5.4 (Medium)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Moderate
A flaw was found in MariaDB, which can lead to SQL injection and privilege escalation. The SHOW CREATE SERVER and SHOW CREATE USER commands, as well as the mariadb-dump utility, do not properly quote identifiers and values when serializing SQL data. An authenticated, low-privileged attacker can exploit this issue by creating database objects with crafted identifiers or values to embed malicious commands into the generated SQL output. When the exported dump or output is subsequently executed, the injected SQL statements run with the privileges of the user applying the data.
7.7 (High)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Important
A flaw was found in MariaDB. An authenticated attacker with low privileges can achieve privilege escalation by modifying the password of another database account. This vulnerability occurs because the database server checks incorrect authorization privileges when processing a GRANT PROXY statement containing an empty password clause, allowing the attacker to compromise target accounts.
8.8 (High)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Important
A flaw was found in MariaDB. The dedicated database service account was configured using the database data directory as its home directory. An authenticated database user with file-writing privileges could place malicious startup scripts into this directory. This could result in arbitrary code execution with the privileges of the service account when an administrator opens a login shell for that user.
8.4 (High)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Important
A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the database server to crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Important
A flaw was found in MariaDB. An authenticated user can execute a database query containing embedded null bytes, which misleads the query cache information (qc_info) plugin. When the cached query details are later read from the information schema, the server accesses memory beyond the allocated buffer. This issue can lead to unauthorized information disclosure or cause a denial of service (DoS) by crashing the database server.
5.4 (Medium)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Moderate
A flaw was found in the mysql_json plugin in MariaDB. The plugin incorrectly assumes that imported MySQL tables contain valid binary JavaScript Object Notation (JSON) data. An attacker can exploit this issue by supplying a specially crafted MySQL table containing invalid JSON data, triggering an out-of-bounds read. This flaw can lead to sensitive information disclosure or cause the database server to crash, resulting in a Denial of Service (DoS).
4.4 (Medium)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Moderate
A flaw was found in MariaDB. An authenticated database user with file write permissions can create an unauthorized configuration file in the service runtime directory. During a subsequent service restart, the service unit loads this file and injects attacker-controlled environment variables into the process. This flaw allows an attacker to escalate privileges and potentially achieve arbitrary code execution on the underlying host system.
8.4 (High)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Important
A flaw was found in MariaDB. An attacker able to place a crafted table format (FRM) metadata file into the database data directory can exploit insufficient validation of metadata boundaries and field counts when the server opens the file. This could lead to out-of-bounds memory operations, potentially allowing arbitrary code execution or causing a Denial of Service (DoS) by crashing the database server.
6.7 (Medium)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Moderate
A flaw was found in MariaDB. An issue in the Access Control List (ACL) cache causes identical privilege cache keys to be generated when a role and a local user share the same name. An attacker with user creation privileges can exploit this key collision by creating a matching account, allowing them to gain unauthorized access and exercise the database privileges of the targeted account.
6.4 (Medium)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Moderate
A flaw was found in MariaDB. An authenticated user with permissions to create users and views can escalate database privileges by creating an account with a crafted username containing embedded newline characters. Due to improper encoding in the view format parser, the injected input is interpreted as security metadata, granting the user unauthorized elevated permissions.
7.2 (High)
Affected products
Fixed
61 products, the same list as for
CVE-2026-85745
Threats
Impact
Important
References
112 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\nmariadb11.8:\n * mariadb11.8-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-backup-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-client-utils-11.8.9-0.1.hum1 (noarch)\n * mariadb11.8-common-11.8.9-0.1.hum1 (noarch)\n * mariadb11.8-connect-engine-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-cracklib-password-check-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-devel-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-duckdb-engine-11.8.9-0.1.hum1 (aarch64, x86_64)\n * mariadb11.8-embedded-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-embedded-devel-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-errmsg-11.8.9-0.1.hum1 (noarch)\n * mariadb11.8-gssapi-server-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-oqgraph-engine-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-pam-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-rocksdb-engine-11.8.9-0.1.hum1 (x86_64)\n * mariadb11.8-s3-engine-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-server-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-server-galera-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-server-utils-11.8.9-0.1.hum1 (noarch)\n * mariadb11.8-sphinx-engine-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-test-11.8.9-0.1.hum1 (aarch64, s390x, x86_64)\n * mariadb11.8-11.8.9-0.1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:84689",
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97380",
"url": "https://access.redhat.com/security/cve/CVE-2026-97380"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-86047",
"url": "https://access.redhat.com/security/cve/CVE-2026-86047"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-85985",
"url": "https://access.redhat.com/security/cve/CVE-2026-85985"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-85745",
"url": "https://access.redhat.com/security/cve/CVE-2026-85745"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-107823",
"url": "https://access.redhat.com/security/cve/CVE-2026-107823"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-107816",
"url": "https://access.redhat.com/security/cve/CVE-2026-107816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-107815",
"url": "https://access.redhat.com/security/cve/CVE-2026-107815"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-107821",
"url": "https://access.redhat.com/security/cve/CVE-2026-107821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-107822",
"url": "https://access.redhat.com/security/cve/CVE-2026-107822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-107817",
"url": "https://access.redhat.com/security/cve/CVE-2026-107817"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-107818",
"url": "https://access.redhat.com/security/cve/CVE-2026-107818"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-107814",
"url": "https://access.redhat.com/security/cve/CVE-2026-107814"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84689.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-10-20T20:43:12+00:00",
"generator": {
"date": "2026-10-20T20:43:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:84689",
"initial_release_date": "2026-10-19T06:08:11+00:00",
"revision_history": [
{
"date": "2026-10-19T06:08:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-19T20:57:38+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-20T20:43:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-backup@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-connect-engine@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-cracklib-password-check@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-devel@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-duckdb-engine@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-embedded@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-embedded-devel@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-gssapi-server@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-oqgraph-engine@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-pam@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-s3-engine@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-server@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-server-galera@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-sphinx-engine@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"product": {
"name": "mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"product_id": "mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-test@11.8.9-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-backup@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-connect-engine@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-cracklib-password-check@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-devel@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-embedded@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-embedded-devel@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-gssapi-server@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-oqgraph-engine@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-pam@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-s3-engine@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-server@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-server-galera@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-sphinx-engine@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"product": {
"name": "mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"product_id": "mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-test@11.8.9-0.1.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "mariadb11.8-0:11.8.9-0.1.hum1@src",
"product": {
"name": "mariadb11.8-0:11.8.9-0.1.hum1@src",
"product_id": "mariadb11.8-0:11.8.9-0.1.hum1@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8@11.8.9-0.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-backup@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-connect-engine@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-cracklib-password-check@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-devel@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-duckdb-engine@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-embedded@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-embedded-devel@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-gssapi-server@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-oqgraph-engine@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-pam@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-rocksdb-engine@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-s3-engine@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-server@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-server-galera@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-sphinx-engine@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64",
"product": {
"name": "mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64",
"product_id": "mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-test@11.8.9-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-client-utils@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product": {
"name": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_id": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-client-utils@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-client-utils@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-common@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product": {
"name": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_id": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-common@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-common@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-errmsg@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product": {
"name": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_id": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-errmsg@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-errmsg@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-server-utils@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product": {
"name": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_id": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-server-utils@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
}
}
},
{
"category": "product_version",
"name": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mariadb11.8-server-utils@11.8.9-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-0:11.8.9-0.1.hum1@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src"
},
"product_reference": "mariadb11.8-0:11.8.9-0.1.hum1@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms"
},
"product_reference": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms"
},
"product_reference": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms"
},
"product_reference": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-server-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms"
},
"product_reference": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64"
},
"product_reference": "mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-test-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x"
},
"product_reference": "mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
},
"product_reference": "mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-85745",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-10-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2553280"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB. An authenticated database user can exploit an out-of-bounds read vulnerability by supplying a specially crafted spatial geometry to the ST_Area function. This issue allows reading beyond allocated memory buffers, leading to unauthorized information disclosure of internal process memory. An attacker could use this disclosed data to facilitate further attacks, such as bypassing security protections like Address Space Layout Randomization (ASLR).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: mariadb: out-of-bounds read in ST_Area with crafted MULTIPOLYGON",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate because successful exploitation requires valid database credentials and only leaks memory contents without directly altering state or causing a service crash. In standard Red Hat Enterprise Linux deployments, the issue is constrained to authenticated database sessions executing spatial geometry operations on MariaDB instances. While the disclosed memory could assist an attacker in bypassing binary protections such as ASLR, arbitrary code execution is not achievable through this flaw alone and would require chaining with a separate memory corruption vulnerability. Consequently, the isolated impact is limited to unauthorized information disclosure within the database process memory space.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-85745"
},
{
"category": "external",
"summary": "RHBZ#2553280",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553280"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-85745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85745"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85745"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3856148",
"url": "https://hackerone.com/reports/3856148"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40328",
"url": "https://jira.mariadb.org/browse/MDEV-40328"
}
],
"release_date": "2026-10-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
},
{
"category": "workaround",
"details": "Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule=\u0027rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept\u0027\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services.",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mariadb: mariadb: out-of-bounds read in ST_Area with crafted MULTIPOLYGON"
},
{
"cve": "CVE-2026-85985",
"cwe": {
"id": "CWE-552",
"name": "Files or Directories Accessible to External Parties"
},
"discovery_date": "2026-10-16T16:31:42.319355+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2554196"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB. Certain file-access User-Defined Functions (UDFs) within the CONNECT storage engine do not properly enforce user privileges or directory restrictions when handling file system paths. An authenticated, low-privileged database user can exploit this vulnerability to read from or write to unauthorized files on the underlying server, subject to the database process\u0027s operating system permissions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: MariaDB: Unauthorized file access via CONNECT engine functions",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-85985"
},
{
"category": "external",
"summary": "RHBZ#2554196",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554196"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-85985",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85985"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85985",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85985"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/4f66ca1b69daf1b7e6a562ca8e86d77a6a70abfe",
"url": "https://github.com/MariaDB/server/commit/4f66ca1b69daf1b7e6a562ca8e86d77a6a70abfe"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-2245-9hm3-wxf6",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-2245-9hm3-wxf6"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40323",
"url": "https://jira.mariadb.org/browse/MDEV-40323"
}
],
"release_date": "2026-10-16T16:21:14.677000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mariadb: MariaDB: Unauthorized file access via CONNECT engine functions"
},
{
"cve": "CVE-2026-86047",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-10-16T16:51:46.486206+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2554208"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB, which can lead to SQL injection and privilege escalation. The SHOW CREATE SERVER and SHOW CREATE USER commands, as well as the mariadb-dump utility, do not properly quote identifiers and values when serializing SQL data. An authenticated, low-privileged attacker can exploit this issue by creating database objects with crafted identifiers or values to embed malicious commands into the generated SQL output. When the exported dump or output is subsequently executed, the injected SQL statements run with the privileges of the user applying the data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: mariadb: SQL injection via improper identifier quoting",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-86047"
},
{
"category": "external",
"summary": "RHBZ#2554208",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554208"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-86047",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86047"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-86047",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86047"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/2b28d1c424104429eeed43115ee6d8a803671d52",
"url": "https://github.com/MariaDB/server/commit/2b28d1c424104429eeed43115ee6d8a803671d52"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/3646569225758c8225e7342783d775ef7c7570e5",
"url": "https://github.com/MariaDB/server/commit/3646569225758c8225e7342783d775ef7c7570e5"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/5acb43522863c9bd6b91f354104ea247bf513e9a",
"url": "https://github.com/MariaDB/server/commit/5acb43522863c9bd6b91f354104ea247bf513e9a"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/9d4ffe23b25808f7858b2dc48106fbd60cf0e513",
"url": "https://github.com/MariaDB/server/commit/9d4ffe23b25808f7858b2dc48106fbd60cf0e513"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/d5d741a3076f911b468518d6b06a917593498c5b",
"url": "https://github.com/MariaDB/server/commit/d5d741a3076f911b468518d6b06a917593498c5b"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-wxr3-wm3p-7w6p",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-wxr3-wm3p-7w6p"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-39776",
"url": "https://jira.mariadb.org/browse/MDEV-39776"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-39818",
"url": "https://jira.mariadb.org/browse/MDEV-39818"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40308",
"url": "https://jira.mariadb.org/browse/MDEV-40308"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40311",
"url": "https://jira.mariadb.org/browse/MDEV-40311"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40312",
"url": "https://jira.mariadb.org/browse/MDEV-40312"
}
],
"release_date": "2026-10-16T16:37:04.254000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
},
{
"category": "workaround",
"details": "--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to ensure strict identifier quoting and literal escaping during SQL serialization and avoid executing unverified database dumps with elevated privileges: upgrade to mariadb 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2 (or the fixed Mariadb/Mariadb:10.11/Mariadb/Mariadb:10.3/Mariadb/Mariadb Devel:10.3/Mariadb/Mariadb:11.8/Mariadb builds), which quote identifiers and escape string literals during statement serialization in SHOW commands and mariadb-dump, closing all 4 injection vectors (crafted username or hostname in SHOW CREATE USER, crafted foreign key constraint name in SHOW CREATE TABLE, crafted option name or foreign data wrapper in SHOW CREATE SERVER, crafted database object names or literals exported via mariadb-dump). Until patched, this is a concern on MariaDB environments where low-privileged users can define database objects and administrators run exported SQL dumps, so restrict database object creation privileges for untrusted accounts and avoid executing exported SQL dumps or SHOW command output with administrative credentials. As a compensating measure, enable audit logging to detect unauthorized privilege and role modifications when SQL dumps are executed, monitor and alert on unintended administrative privilege assignments resulting from executing injected SQL, and restrict database permissions so unprivileged users cannot create or alter database objects. These controls limit blast radius and contain exploitation, but they do not fix the underlying improper identifier quoting defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-1315 Allowlist-Preferred Input Validation (Deny-by-Default Filtering) (high)",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mariadb: mariadb: SQL injection via improper identifier quoting"
},
{
"cve": "CVE-2026-97380",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-10-16T16:33:09.099376+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2554198"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB. An authenticated attacker with low privileges can achieve privilege escalation by modifying the password of another database account. This vulnerability occurs because the database server checks incorrect authorization privileges when processing a GRANT PROXY statement containing an empty password clause, allowing the attacker to compromise target accounts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97380"
},
{
"category": "external",
"summary": "RHBZ#2554198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554198"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97380"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97380",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97380"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/dbd60d0ad8daa2d01050346aa50b7b102490e456",
"url": "https://github.com/MariaDB/server/commit/dbd60d0ad8daa2d01050346aa50b7b102490e456"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40470",
"url": "https://jira.mariadb.org/browse/MDEV-40470"
}
],
"release_date": "2026-10-16T16:23:07.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
},
{
"category": "workaround",
"details": "--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to enforce strict grantor privilege checks when parsing GRANT PROXY statements containing empty authentication clauses in MariaDB: upgrade to mariadb 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2 (or the fixed Mariadb/Mariadb:10.11/Mariadb/Mariadb:10.3/Mariadb/Mariadb Devel:10.3/Mariadb/Mariadb:11.8/Mariadb builds), which check whether the auth pointer exists rather than checking string lengths in LEX_USER::has_auth() and remove extraneous USER_AUTH allocation in the parser, closing GRANT PROXY statement with empty IDENTIFIED password clause. Until patched, this is a concern on all MariaDB deployments allowing low-privileged authenticated database access, so use random and non-guessable database user account names and restrict access for untrusted database accounts. As a compensating measure, audit database account authorization changes to detect unauthorized modification of user passwords and proxy privileges, forward administrative SQL operations including GRANT PROXY to a SIEM for alerting on privilege escalation attempts, and alert on unexpected proxy privileges or role assignments to detect unauthorized account compromise. These controls limit blast radius and contain exploitation, but they do not fix the underlying improper authorization check defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-1006 Privilege Change Audit Logging (medium)",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement"
},
{
"cve": "CVE-2026-107814",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"discovery_date": "2026-10-09T16:11:51.678564+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548712"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB. The dedicated database service account was configured using the database data directory as its home directory. An authenticated database user with file-writing privileges could place malicious startup scripts into this directory. This could result in arbitrary code execution with the privileges of the service account when an administrator opens a login shell for that user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: mariadb: Arbitrary code execution via insecure service account home directory",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-107814"
},
{
"category": "external",
"summary": "RHBZ#2548712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-107814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-107814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107814"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/d842d6e994a8b0d67c280bf785a11357d6b316a2",
"url": "https://github.com/MariaDB/server/commit/d842d6e994a8b0d67c280bf785a11357d6b316a2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-m5gf-432r-g5jw",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-m5gf-432r-g5jw"
}
],
"release_date": "2026-10-09T16:02:25.544000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mariadb: mariadb: Arbitrary code execution via insecure service account home directory"
},
{
"cve": "CVE-2026-107815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-10-09T16:31:34.017958+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548718"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the database server to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: mariadb: Arbitrary code execution via CONNECT engine out-of-bounds write",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-107815"
},
{
"category": "external",
"summary": "RHBZ#2548718",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548718"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-107815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-107815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107815"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/b369925f6855d3e1f0ebcf453492724b99fda6f8",
"url": "https://github.com/MariaDB/server/commit/b369925f6855d3e1f0ebcf453492724b99fda6f8"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-4wgx-ffg9-jrwq",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-4wgx-ffg9-jrwq"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40637",
"url": "https://jira.mariadb.org/browse/MDEV-40637"
}
],
"release_date": "2026-10-09T16:05:49.046000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mariadb: mariadb: Arbitrary code execution via CONNECT engine out-of-bounds write"
},
{
"cve": "CVE-2026-107816",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-10-09T17:32:09.885152+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548739"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB. An authenticated user can execute a database query containing embedded null bytes, which misleads the query cache information (qc_info) plugin. When the cached query details are later read from the information schema, the server accesses memory beyond the allocated buffer. This issue can lead to unauthorized information disclosure or cause a denial of service (DoS) by crashing the database server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-107816"
},
{
"category": "external",
"summary": "RHBZ#2548739",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548739"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-107816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-107816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107816"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e",
"url": "https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40670",
"url": "https://jira.mariadb.org/browse/MDEV-40670"
}
],
"release_date": "2026-10-09T17:19:00.365000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mariadb: mariadb: Information disclosure via embedded null bytes in query cache plugin"
},
{
"cve": "CVE-2026-107817",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-10-09T17:31:39.617323+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548737"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the mysql_json plugin in MariaDB. The plugin incorrectly assumes that imported MySQL tables contain valid binary JavaScript Object Notation (JSON) data. An attacker can exploit this issue by supplying a specially crafted MySQL table containing invalid JSON data, triggering an out-of-bounds read. This flaw can lead to sensitive information disclosure or cause the database server to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json plugin",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-107817"
},
{
"category": "external",
"summary": "RHBZ#2548737",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548737"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-107817",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-107817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107817"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907",
"url": "https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40678",
"url": "https://jira.mariadb.org/browse/MDEV-40678"
}
],
"release_date": "2026-10-09T17:22:19.290000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json plugin"
},
{
"cve": "CVE-2026-107818",
"cwe": {
"id": "CWE-15",
"name": "External Control of System or Configuration Setting"
},
"discovery_date": "2026-10-09T17:31:30.019621+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548736"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB. An authenticated database user with file write permissions can create an unauthorized configuration file in the service runtime directory. During a subsequent service restart, the service unit loads this file and injects attacker-controlled environment variables into the process. This flaw allows an attacker to escalate privileges and potentially achieve arbitrary code execution on the underlying host system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: mariadb: Privilege escalation via environment variable injection during service restart",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-107818"
},
{
"category": "external",
"summary": "RHBZ#2548736",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548736"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-107818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-107818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107818"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/e3d62d4e78fd4941cef3f5053e6a50d0b32d740e",
"url": "https://github.com/MariaDB/server/commit/e3d62d4e78fd4941cef3f5053e6a50d0b32d740e"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-mhvc-vqcq-7vq5",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-mhvc-vqcq-7vq5"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40629",
"url": "https://jira.mariadb.org/browse/MDEV-40629"
}
],
"release_date": "2026-10-09T17:23:58.543000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mariadb: mariadb: Privilege escalation via environment variable injection during service restart"
},
{
"cve": "CVE-2026-107821",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-10-09T17:31:11.535663+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB. An attacker able to place a crafted table format (FRM) metadata file into the database data directory can exploit insufficient validation of metadata boundaries and field counts when the server opens the file. This could lead to out-of-bounds memory operations, potentially allowing arbitrary code execution or causing a Denial of Service (DoS) by crashing the database server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: mariadb: Arbitrary code execution via crafted FRM metadata",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-107821"
},
{
"category": "external",
"summary": "RHBZ#2548734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-107821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-107821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107821"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/3b1c2e58abab5571bec4ff52773ddc75b1738da9",
"url": "https://github.com/MariaDB/server/commit/3b1c2e58abab5571bec4ff52773ddc75b1738da9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-c4gx-34mg-95q5",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-c4gx-34mg-95q5"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40571",
"url": "https://jira.mariadb.org/browse/MDEV-40571"
}
],
"release_date": "2026-10-09T17:27:16.316000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mariadb: mariadb: Arbitrary code execution via crafted FRM metadata"
},
{
"cve": "CVE-2026-107822",
"cwe": {
"id": "CWE-694",
"name": "Use of Multiple Resources with Duplicate Identifier"
},
"discovery_date": "2026-10-09T17:32:00.479680+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548738"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB. An issue in the Access Control List (ACL) cache causes identical privilege cache keys to be generated when a role and a local user share the same name. An attacker with user creation privileges can exploit this key collision by creating a matching account, allowing them to gain unauthorized access and exercise the database privileges of the targeted account.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: MariaDB: Privilege escalation via ACL cache key collision",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-107822"
},
{
"category": "external",
"summary": "RHBZ#2548738",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548738"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-107822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-107822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107822"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/67ea07dd3400004e4f7ae01bf977f4344bbe064b",
"url": "https://github.com/MariaDB/server/commit/67ea07dd3400004e4f7ae01bf977f4344bbe064b"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-2m85-2x26-36rf",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-2m85-2x26-36rf"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40541",
"url": "https://jira.mariadb.org/browse/MDEV-40541"
}
],
"release_date": "2026-10-09T17:28:47.578000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mariadb: MariaDB: Privilege escalation via ACL cache key collision"
},
{
"cve": "CVE-2026-107823",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-10-09T17:51:26.207343+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548750"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MariaDB. An authenticated user with permissions to create users and views can escalate database privileges by creating an account with a crafted username containing embedded newline characters. Due to improper encoding in the view format parser, the injected input is interpreted as security metadata, granting the user unauthorized elevated permissions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mariadb: mariadb: Privilege escalation via unescaped newlines in view parser",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is classified as having an Important severity because successful exploitation enables an authenticated database account to escalate to full administrative access across the database instance, although it requires holding significant existing privileges. In standard Red Hat Enterprise Linux deployments, non-administrative database users are not granted user creation or view delegation privileges by default. The primary risk occurs in shared or multi-tenant database environments where delegated user administration is enabled, allowing a privileged user to cross privilege boundaries.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-107823"
},
{
"category": "external",
"summary": "RHBZ#2548750",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548750"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-107823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-107823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-107823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107823"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/commit/8a642bc8103aadc6b2087d781ba8e1595616a2c4",
"url": "https://github.com/MariaDB/server/commit/8a642bc8103aadc6b2087d781ba8e1595616a2c4"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2",
"url": "https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"
},
{
"category": "external",
"summary": "https://github.com/MariaDB/server/security/advisories/GHSA-g2q2-3936-cp37",
"url": "https://github.com/MariaDB/server/security/advisories/GHSA-g2q2-3936-cp37"
},
{
"category": "external",
"summary": "https://jira.mariadb.org/browse/MDEV-40484",
"url": "https://jira.mariadb.org/browse/MDEV-40484"
}
],
"release_date": "2026-10-09T17:30:36.062000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-19T06:08:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:84689"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@src",
"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-backup-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-client-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-connect-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-cracklib-password-check-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-duckdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-embedded-devel-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-errmsg-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-gssapi-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-pam-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-rocksdb-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-s3-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-server-galera-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-s390x-rpms",
"Red Hat Hardened Images:mariadb11.8-server-utils-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-sphinx-engine-0:11.8.9-0.1.hum1@x86_64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@aarch64",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@s390x",
"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mariadb: mariadb: Privilege escalation via unescaped newlines in view parser"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.