{"id":"RHSA-2026:84689","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","modified":"2026-10-20T10:43:37.347030984Z","published":"2026-10-20T10:17:43Z","upstream":["CVE-2026-107814","CVE-2026-107815","CVE-2026-107816","CVE-2026-107817","CVE-2026-107818","CVE-2026-107821","CVE-2026-107822","CVE-2026-107823","CVE-2026-85745","CVE-2026-85985","CVE-2026-86047","CVE-2026-97380"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:84689"},{"type":"ARTICLE","url":"https://images.redhat.com/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-97380"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-86047"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-85985"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-85745"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-107823"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-107816"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-107815"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-107821"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-107822"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-107817"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-107818"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-107814"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84689.json"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553280"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-85745"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85745"},{"type":"ARTICLE","url":"https://hackerone.com/reports/3856148"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40328"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554196"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-85985"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85985"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/4f66ca1b69daf1b7e6a562ca8e86d77a6a70abfe"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-2245-9hm3-wxf6"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40323"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554208"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-86047"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86047"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/2b28d1c424104429eeed43115ee6d8a803671d52"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/3646569225758c8225e7342783d775ef7c7570e5"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/5acb43522863c9bd6b91f354104ea247bf513e9a"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/9d4ffe23b25808f7858b2dc48106fbd60cf0e513"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/d5d741a3076f911b468518d6b06a917593498c5b"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-wxr3-wm3p-7w6p"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-39776"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-39818"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40308"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40311"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40312"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554198"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-97380"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97380"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/dbd60d0ad8daa2d01050346aa50b7b102490e456"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40470"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548712"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-107814"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107814"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/d842d6e994a8b0d67c280bf785a11357d6b316a2"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-m5gf-432r-g5jw"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548718"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-107815"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107815"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/b369925f6855d3e1f0ebcf453492724b99fda6f8"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-4wgx-ffg9-jrwq"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40637"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548739"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-107816"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107816"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40670"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548737"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-107817"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107817"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40678"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548736"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-107818"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107818"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/e3d62d4e78fd4941cef3f5053e6a50d0b32d740e"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-mhvc-vqcq-7vq5"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40629"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548734"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-107821"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107821"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/3b1c2e58abab5571bec4ff52773ddc75b1738da9"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-c4gx-34mg-95q5"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40571"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548738"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-107822"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107822"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/67ea07dd3400004e4f7ae01bf977f4344bbe064b"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-2m85-2x26-36rf"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40541"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548750"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-107823"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107823"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/commit/8a642bc8103aadc6b2087d781ba8e1595616a2c4"},{"type":"ARTICLE","url":"https://github.com/MariaDB/server/security/advisories/GHSA-g2q2-3936-cp37"},{"type":"ARTICLE","url":"https://jira.mariadb.org/browse/MDEV-40484"}],"affected":[{"package":{"name":"mariadb11.8","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-backup","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-backup"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-client-utils","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-client-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-common","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-connect-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-connect-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-cracklib-password-check","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-cracklib-password-check"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-duckdb-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-duckdb-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-embedded","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-embedded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-embedded-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-embedded-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-errmsg","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-errmsg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-gssapi-server","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-gssapi-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-oqgraph-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-oqgraph-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-pam","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-pam"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-rocksdb-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-rocksdb-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-s3-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-s3-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-server","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-server-galera","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-server-galera"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-server-utils","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-server-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-sphinx-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-sphinx-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}},{"package":{"name":"mariadb11.8-test","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:84689.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}