Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This advisory from Red Hat Product Security announces an update to Red Hat Hardened Images RPMs, specifically for mariadb11.8 packages across various architectures (aarch64, s390x, x86_64, noarch). The update includes version 11.8.9-0.1.hum1 of multiple mariadb11.8 RPMs. The advisory references multiple CVEs (including CVE-2026-85745 and others) covering a range of vulnerabilities such as CWE-125 (Out-of-bounds Read), CWE-552 (Files or Directories Accessible to External Parties), CWE-89 (SQL Injection), CWE-266 (Incorrect Privilege Assignment), CWE-427 (Uncontrolled Search Path Element), CWE-787 (Out-of-bounds Write), CWE-15 (External Control of System or Configuration Setting), CWE-694 (Use of Hard-coded Credentials), and CWE-93 (Improper Neutralization of CRLF Sequences). The advisory does not provide detailed technical descriptions of each vulnerability but indicates a high severity level and that the update includes bug fixes and enhancements.

The vulnerabilities addressed in this update are considered high severity and potentially impact the security of systems using the affected mariadb11.8 RPMs in Red Hat Hardened Images. The range of CWEs suggests risks including memory corruption, privilege escalation, SQL injection, and configuration weaknesses. These could lead to unauthorized access, data compromise, or system instability if exploited. However, no known exploits in the wild are reported at this time.

Red Hat has released updated RPM packages (version 11.8.9-0.1.hum1) for mariadb11.8 components to address these vulnerabilities. Users of Red Hat Hardened Images should apply these updates promptly by following the instructions at https://images.redhat.com/. No additional mitigation steps are specified or required beyond applying the official update.