Red Hat Security Advisory

RHSA-2026:84689

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images mariadb11.8-3:11.8.9-0.1.hum1@aarch64, mariadb11.8-3:11.8.9-0.1.hum1@s390x, mariadb11.8-3:11.8.9-0.1.hum1@src +47

Fixes 15 records

TI-2026-75368 CVE-2026-97380

MariaDB GRANT PROXY lets attackers set other accounts' passwords

MEDIUM 43

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01303 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-620

TI-2026-70096 CVE-2026-107815

Out-of-bounds write in MariaDB CONNECT engine DOS tables

MEDIUM 42

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01381 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-787

TI-2026-70111 CVE-2026-107821

Insufficient validation of FRM files in MariaDB server

LOW 39

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01202 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-1285

TI-2026-70108 CVE-2026-107818

Environment injection in MariaDB server via wsrep bootstrap file

LOW 39

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00401 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-15

TI-2026-70086 CVE-2026-107814

Insecure mysql home directory in MariaDB RPM packages

LOW 39

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00489 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-732

TI-2026-75374 CVE-2026-86047

Insufficient quoting in MariaDB mariadb-dump and SHOW commands

LOW 37

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00856 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-89

TI-2026-70113 CVE-2026-107823

Privilege escalation in MariaDB server via crafted view usernames

LOW 35

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00786 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-116

TI-2026-70112 CVE-2026-107822

Privilege escalation in MariaDB via role and user name collision

LOW 31

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 6.4 Network High privileges User interaction EPSS 0.00516 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-706

TI-2026-43250 CVE-2026-60585 · GHSA-5wmq-h5x7-m9vv

Improper access control in Oracle MySQL Server

LOW 31

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.0036 Published 2026-07-21 Partial fix CWE-284

TI-2026-43032 CVE-2026-60331 · GHSA-9h9h-6f2c-xmhc

Improper access control in Oracle MySQL Server

LOW 30

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00197 Published 2026-07-21 Partial fix CWE-284

TI-2026-70106 CVE-2026-107816

Out-of-bounds read in MariaDB server qc_info plugin

LOW 28

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00345 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-125

TI-2026-75365 CVE-2026-85985

Unauthorized file access in MariaDB CONNECT engine functions

LOW 25

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00452 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-862

TI-2026-75369 CVE-2026-85745

Buffer over-read in MariaDB ST_Area with malformed MultiPolygon data

LOW 21

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00534 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-126

TI-2026-70107 CVE-2026-107817

Out-of-bounds reads in MariaDB server mysql_json plugin

LOW 19

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00151 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-125

TI-2026-43725 CVE-2026-61081 · GHSA-jqr3-jfj2-492m

Information disclosure in Oracle MySQL Server

LOW 13

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00259 Published 2026-07-21 Partial fix CWE-200