Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

This Red Hat security advisory addresses multiple security vulnerabilities in the mariadb10.11 packages included in Red Hat Hardened Images RPMs. The update includes new package versions (10.11.18-4.1.1.hum1) for various architectures (aarch64, s390x, x86_64, noarch, src). The vulnerabilities fixed are identified by CVE numbers: CVE-2026-85745, CVE-2026-85985, CVE-2026-86047, CVE-2026-97380, CVE-2026-107814, and CVE-2026-107823. The advisory does not provide detailed technical descriptions of the vulnerabilities but references multiple CWE categories including CWE-125 (Out-of-bounds Read), CWE-552 (Files or Directories Accessible to External Parties), CWE-89 (SQL Injection), CWE-266 (Incorrect Privilege Assignment), CWE-427 (Uncontrolled Search Path Element), and CWE-93 (Improper Neutralization of CRLF Sequences). The advisory directs users to apply the updated RPM packages available from Red Hat's public repositories.

The vulnerabilities fixed in this update potentially affect the security of MariaDB 10.11 components within Red Hat Hardened Images, possibly allowing unauthorized access, privilege escalation, SQL injection, or other security breaches. The advisory classifies the severity as high but does not specify active exploitation or detailed impact scenarios. The update mitigates these risks by providing patched RPM packages.

Red Hat has released updated RPM packages for mariadb10.11 that address the listed CVEs. Users should apply these updates promptly by upgrading to the provided package versions (10.11.18-4.1.1.hum1) from Red Hat's official repositories. No additional mitigation steps are indicated or required beyond applying the official update.