{"schemaVersion":3,"id":"RHSA-2026:25145","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","dates":{"published":"2026-06-25T10:41:09.000Z","modified":"2026-10-09T10:23:29.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.9,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":7.9,"impact":10,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"mariadb10.11","name":"mariadb10.11","label":"mariadb10.11","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-backup","name":"mariadb10.11-backup","label":"mariadb10.11-backup","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-backup","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-client-utils","name":"mariadb10.11-client-utils","label":"mariadb10.11-client-utils","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-client-utils","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-common","name":"mariadb10.11-common","label":"mariadb10.11-common","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-common","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-connect-engine","name":"mariadb10.11-connect-engine","label":"mariadb10.11-connect-engine","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-connect-engine","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-cracklib-password-check","name":"mariadb10.11-cracklib-password-check","label":"mariadb10.11-cracklib-password-check","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-cracklib-password-check","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-devel","name":"mariadb10.11-devel","label":"mariadb10.11-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-devel","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-embedded","name":"mariadb10.11-embedded","label":"mariadb10.11-embedded","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-embedded","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-embedded-devel","name":"mariadb10.11-embedded-devel","label":"mariadb10.11-embedded-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-embedded-devel","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-errmsg","name":"mariadb10.11-errmsg","label":"mariadb10.11-errmsg","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-errmsg","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-gssapi-server","name":"mariadb10.11-gssapi-server","label":"mariadb10.11-gssapi-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-gssapi-server","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-oqgraph-engine","name":"mariadb10.11-oqgraph-engine","label":"mariadb10.11-oqgraph-engine","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-oqgraph-engine","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-pam","name":"mariadb10.11-pam","label":"mariadb10.11-pam","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-pam","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-rocksdb-engine","name":"mariadb10.11-rocksdb-engine","label":"mariadb10.11-rocksdb-engine","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-rocksdb-engine","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-s3-engine","name":"mariadb10.11-s3-engine","label":"mariadb10.11-s3-engine","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-s3-engine","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-server","name":"mariadb10.11-server","label":"mariadb10.11-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-server","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-server-galera","name":"mariadb10.11-server-galera","label":"mariadb10.11-server-galera","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-server-galera","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-server-utils","name":"mariadb10.11-server-utils","label":"mariadb10.11-server-utils","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-server-utils","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-sphinx-engine","name":"mariadb10.11-sphinx-engine","label":"mariadb10.11-sphinx-engine","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-sphinx-engine","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"mariadb10.11-test","name":"mariadb10.11-test","label":"mariadb10.11-test","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/mariadb10.11-test","purlType":"rpm","versions":[{"text":"< 0:10.11.18-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:10.11.18-1.hum1","eol":null,"hubHref":null}],"affectedCount":20,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:25145","label":"access.redhat.com/errata/RHSA-2026:25145","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://images.redhat.com/","label":"images.redhat.com","hostname":"images.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49261","label":"access.redhat.com/security/cve/CVE-2026-49261","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/updates/classification/","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44169","label":"access.redhat.com/security/cve/CVE-2026-44169","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44168","label":"access.redhat.com/security/cve/CVE-2026-44168","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44170","label":"access.redhat.com/security/cve/CVE-2026-44170","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44171","label":"access.redhat.com/security/cve/CVE-2026-44171","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48163","label":"access.redhat.com/security/cve/CVE-2026-48163","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48165","label":"access.redhat.com/security/cve/CVE-2026-48165","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44173","label":"access.redhat.com/security/cve/CVE-2026-44173","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25145.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25145.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488450","label":"bugzilla.redhat.com/show_bug.cgi?id=2488450","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44168","label":"www.cve.org/CVERecord?id=CVE-2026-44168","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44168","label":"nvd.nist.gov/vuln/detail/CVE-2026-44168","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-vwf7-w26c-9w5h","label":"github.com/MariaDB/server/security/advisories/GHSA-vwf7-w26c-9w5h","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://jira.mariadb.org/browse/MDEV-39413","label":"jira.mariadb.org/browse/MDEV-39413","hostname":"jira.mariadb.org","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488467","label":"bugzilla.redhat.com/show_bug.cgi?id=2488467","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44169","label":"www.cve.org/CVERecord?id=CVE-2026-44169","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44169","label":"nvd.nist.gov/vuln/detail/CVE-2026-44169","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-22xq-vq3f-87x2","label":"github.com/MariaDB/server/security/advisories/GHSA-22xq-vq3f-87x2","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://jira.mariadb.org/browse/MDEV-39288","label":"jira.mariadb.org/browse/MDEV-39288","hostname":"jira.mariadb.org","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488451","label":"bugzilla.redhat.com/show_bug.cgi?id=2488451","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44170","label":"www.cve.org/CVERecord?id=CVE-2026-44170","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44170","label":"nvd.nist.gov/vuln/detail/CVE-2026-44170","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-f835-cfjq-wf73","label":"github.com/MariaDB/server/security/advisories/GHSA-f835-cfjq-wf73","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://jira.mariadb.org/browse/MDEV-39289","label":"jira.mariadb.org/browse/MDEV-39289","hostname":"jira.mariadb.org","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488453","label":"bugzilla.redhat.com/show_bug.cgi?id=2488453","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44171","label":"www.cve.org/CVERecord?id=CVE-2026-44171","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44171","label":"nvd.nist.gov/vuln/detail/CVE-2026-44171","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-9pjh-5hhw-65v9","label":"github.com/MariaDB/server/security/advisories/GHSA-9pjh-5hhw-65v9","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://jira.mariadb.org/browse/MDEV-39408","label":"jira.mariadb.org/browse/MDEV-39408","hostname":"jira.mariadb.org","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488460","label":"bugzilla.redhat.com/show_bug.cgi?id=2488460","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44173","label":"www.cve.org/CVERecord?id=CVE-2026-44173","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44173","label":"nvd.nist.gov/vuln/detail/CVE-2026-44173","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-667j-m53j-wpmc","label":"github.com/MariaDB/server/security/advisories/GHSA-667j-m53j-wpmc","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://jira.mariadb.org/browse/MDEV-39493","label":"jira.mariadb.org/browse/MDEV-39493","hostname":"jira.mariadb.org","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488454","label":"bugzilla.redhat.com/show_bug.cgi?id=2488454","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48163","label":"www.cve.org/CVERecord?id=CVE-2026-48163","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48163","label":"nvd.nist.gov/vuln/detail/CVE-2026-48163","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-rpgv-q6gv-684r","label":"github.com/MariaDB/server/security/advisories/GHSA-rpgv-q6gv-684r","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://jira.mariadb.org/browse/MDEV-39648","label":"jira.mariadb.org/browse/MDEV-39648","hostname":"jira.mariadb.org","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488458","label":"bugzilla.redhat.com/show_bug.cgi?id=2488458","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48165","label":"www.cve.org/CVERecord?id=CVE-2026-48165","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48165","label":"nvd.nist.gov/vuln/detail/CVE-2026-48165","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-7v3p-h23x-8hwv","label":"github.com/MariaDB/server/security/advisories/GHSA-7v3p-h23x-8hwv","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://jira.mariadb.org/browse/MDEV-39676","label":"jira.mariadb.org/browse/MDEV-39676","hostname":"jira.mariadb.org","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2487957","label":"bugzilla.redhat.com/show_bug.cgi?id=2487957","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49261","label":"www.cve.org/CVERecord?id=CVE-2026-49261","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49261","label":"nvd.nist.gov/vuln/detail/CVE-2026-49261","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-3p3m-4x7c-p4pw","label":"github.com/MariaDB/server/security/advisories/GHSA-3p3m-4x7c-p4pw","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://jira.mariadb.org/browse/MDEV-39721","label":"jira.mariadb.org/browse/MDEV-39721","hostname":"jira.mariadb.org","tags":["ARTICLE"]}],"lineage":{"upstream":["CVE-2026-44168","CVE-2026-44169","CVE-2026-44170","CVE-2026-44171","CVE-2026-44173","CVE-2026-48163","CVE-2026-48165","CVE-2026-49261"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-06-25T10:41:09.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-09T10:23:29.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T16:27:17.974Z","stale":false,"partial":false}}