Skip to content
OpenAdvisories
High ALSA-2026:56007 29 CVEs

Important: mysql8.4 security, bug fix, and enhancement update

Published Aug 18, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.

Security Fix(es):

* mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081)
* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064)
* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190)
* mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177)
* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145)
* mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186)
* mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315)
* mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60184)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60185)
* mysql: JSON unspecified vulnerability (CPU Jul 2026) (CVE-2026-61109)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60191)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-61094)
* mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60178)
* mysql: Group Replication GCS unspecified vulnerability (CPU Jul 2026) (CVE-2026-60332)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60189)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60747)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-47023)
* mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60183)
* mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60316)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60187)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60585)
* mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60182)

Bug Fix(es) and Enhancement(s):

* [tracker] Rebase MySQL to 8.4.11 (JIRA:AlmaLinux-188044)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 8

ReleasePackageFixed in
AlmaLinux · 10 mysql8.4 8.4.11-1.el10_2.alma.1
AlmaLinux · 10 mysql8.4-common 8.4.11-1.el10_2.alma.1
AlmaLinux · 10 mysql8.4-devel 8.4.11-1.el10_2.alma.1
AlmaLinux · 10 mysql8.4-errmsg 8.4.11-1.el10_2.alma.1
AlmaLinux · 10 mysql8.4-libs 8.4.11-1.el10_2.alma.1
AlmaLinux · 10 mysql8.4-server 8.4.11-1.el10_2.alma.1
AlmaLinux · 10 mysql8.4-test 8.4.11-1.el10_2.alma.1
AlmaLinux · 10 mysql8.4-test-data 8.4.11-1.el10_2.alma.1

Vulnerabilities 29

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-46936
  • report
    https://access.redhat.com/security/cve/CVE-2026-47012
  • report
    https://access.redhat.com/security/cve/CVE-2026-47023
  • report
    https://access.redhat.com/security/cve/CVE-2026-47052
  • report
    https://access.redhat.com/security/cve/CVE-2026-47064
  • report
    https://access.redhat.com/security/cve/CVE-2026-60145
  • report
    https://access.redhat.com/security/cve/CVE-2026-60163
  • report
    https://access.redhat.com/security/cve/CVE-2026-60177
  • report
    https://access.redhat.com/security/cve/CVE-2026-60178
  • report
    https://access.redhat.com/security/cve/CVE-2026-60182
  • report
    https://access.redhat.com/security/cve/CVE-2026-60183
  • report
    https://access.redhat.com/security/cve/CVE-2026-60184
  • report
    https://access.redhat.com/security/cve/CVE-2026-60185
  • report
    https://access.redhat.com/security/cve/CVE-2026-60186
  • report
    https://access.redhat.com/security/cve/CVE-2026-60187
  • report
    https://access.redhat.com/security/cve/CVE-2026-60188
  • report
    https://access.redhat.com/security/cve/CVE-2026-60189
  • report
    https://access.redhat.com/security/cve/CVE-2026-60190
  • report
    https://access.redhat.com/security/cve/CVE-2026-60191
  • report
    https://access.redhat.com/security/cve/CVE-2026-60315
  • report
    https://access.redhat.com/security/cve/CVE-2026-60316
  • report
    https://access.redhat.com/security/cve/CVE-2026-60331
  • report
    https://access.redhat.com/security/cve/CVE-2026-60332
  • report
    https://access.redhat.com/security/cve/CVE-2026-60585
  • report
    https://access.redhat.com/security/cve/CVE-2026-60747
  • report
    https://access.redhat.com/security/cve/CVE-2026-61081
  • report
    https://access.redhat.com/security/cve/CVE-2026-61094
  • report
    https://access.redhat.com/security/cve/CVE-2026-61096
  • report
    https://access.redhat.com/security/cve/CVE-2026-61109
  • report
    https://bugzilla.redhat.com/2504779
  • report
    https://bugzilla.redhat.com/2504823
  • report
    https://bugzilla.redhat.com/2504848
  • report
    https://bugzilla.redhat.com/2504855
  • report
    https://bugzilla.redhat.com/2504877
  • report
    https://bugzilla.redhat.com/2504925
  • report
    https://bugzilla.redhat.com/2504940
  • report
    https://bugzilla.redhat.com/2505001
  • report
    https://bugzilla.redhat.com/2505002
  • report
    https://bugzilla.redhat.com/2505027