Skip to content
OpenAdvisories
Medium ALSA-2026:4162 6 CVEs

Moderate: mysql8.4 security update

Published Mar 10, 2026 · Updated Oct 29, 2026

Summary

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.

Security Fix(es):

* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
* mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
* mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 3

ReleasePackageFixed in
AlmaLinux · 10 mysql8.4-common 8.4.8-1.el10_1
AlmaLinux · 10 mysql8.4-errmsg 8.4.8-1.el10_1
AlmaLinux · 10 mysql8.4-test-data 8.4.8-1.el10_1

Vulnerabilities 6

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-21936
  • report
    https://access.redhat.com/security/cve/CVE-2026-21937
  • report
    https://access.redhat.com/security/cve/CVE-2026-21941
  • report
    https://access.redhat.com/security/cve/CVE-2026-21948
  • report
    https://access.redhat.com/security/cve/CVE-2026-21964
  • report
    https://access.redhat.com/security/cve/CVE-2026-21968
  • report
    https://bugzilla.redhat.com/2431384
  • report
    https://bugzilla.redhat.com/2431385
  • report
    https://bugzilla.redhat.com/2431402
  • report
    https://bugzilla.redhat.com/2431409
  • report
    https://bugzilla.redhat.com/2431413
  • report
    https://bugzilla.redhat.com/2431431
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-4162.html