{"id":"RHSA-2026:37094","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","modified":"2026-10-20T10:08:03Z","published":"2026-07-16T10:09:31Z","upstream":["CVE-2026-44431","CVE-2026-59886"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37094"},{"type":"ARTICLE","url":"https://images.redhat.com/"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-59886"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-44431"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37094.json"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477167"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-44431"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431"},{"type":"ARTICLE","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500041"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-59886"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59886"},{"type":"ARTICLE","url":"https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886"},{"type":"ARTICLE","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"type":"ARTICLE","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r"}],"affected":[{"package":{"name":"mariadb","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-backup","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-backup"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-client-utils","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-client-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-common","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-connect-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-connect-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-cracklib-password-check","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-cracklib-password-check"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-embedded","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-embedded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-embedded-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-embedded-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-errmsg","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-errmsg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-gssapi-server","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-gssapi-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-oqgraph-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-oqgraph-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-pam","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-pam"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-rocksdb-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-rocksdb-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-s3-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-s3-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-server","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-server-galera","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-server-galera"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-server-utils","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-server-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-sphinx-engine","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-sphinx-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb-test","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}},{"package":{"name":"mariadb11.8","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/mariadb11.8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.8-3.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:37094.json"}}],"schema_version":"1.9.1","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}