Skip to content
OpenAdvisories
High ALSA-2026:56973 29 CVEs

Important: mysql:8.4 security, bug fix, and enhancement update

Published Aug 19, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081)
* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064)
* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190)
* mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177)
* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145)
* mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186)
* mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315)
* mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096)
* mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163)
* mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60184)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60185)
* mysql: JSON unspecified vulnerability (CPU Jul 2026) (CVE-2026-61109)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60191)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-61094)
* mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60178)
* mysql: Group Replication GCS unspecified vulnerability (CPU Jul 2026) (CVE-2026-60332)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60189)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60747)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-47023)
* mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60183)
* mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60316)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60187)
* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60585)
* mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60182)

Bug Fix(es) and Enhancement(s):

* [tracker] Rebase MySQL to 8.4.11 (JIRA:AlmaLinux-188045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 15

ReleasePackageFixed in
AlmaLinux · 9 mecab 0.996-3.module_el9.6.0+152+8cbce00c.4
AlmaLinux · 9 mecab-devel 0.996-3.module_el9.6.0+152+8cbce00c.4
AlmaLinux · 9 mecab-ipadic 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c
AlmaLinux · 9 mecab-ipadic-EUCJP 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c
AlmaLinux · 9 mysql 8.4.11-1.module_el9.8.0+295+1681b9df
AlmaLinux · 9 mysql-common 8.4.11-1.module_el9.8.0+295+1681b9df
AlmaLinux · 9 mysql-devel 8.4.11-1.module_el9.8.0+295+1681b9df
AlmaLinux · 9 mysql-errmsg 8.4.11-1.module_el9.8.0+295+1681b9df
AlmaLinux · 9 mysql-libs 8.4.11-1.module_el9.8.0+295+1681b9df
AlmaLinux · 9 mysql-server 8.4.11-1.module_el9.8.0+295+1681b9df
AlmaLinux · 9 mysql-test 8.4.11-1.module_el9.8.0+295+1681b9df
AlmaLinux · 9 mysql-test-data 8.4.11-1.module_el9.8.0+295+1681b9df
AlmaLinux · 9 perl-DBD-MySQL 4.053-3.module_el9.8.0+235+a38ba90c
AlmaLinux · 9 rapidjson-devel 1.1.0-19.module_el9.6.0+152+8cbce00c
AlmaLinux · 9 rapidjson-doc 1.1.0-19.module_el9.6.0+152+8cbce00c

Vulnerabilities 29

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-46936
  • report
    https://access.redhat.com/security/cve/CVE-2026-47012
  • report
    https://access.redhat.com/security/cve/CVE-2026-47023
  • report
    https://access.redhat.com/security/cve/CVE-2026-47052
  • report
    https://access.redhat.com/security/cve/CVE-2026-47064
  • report
    https://access.redhat.com/security/cve/CVE-2026-60145
  • report
    https://access.redhat.com/security/cve/CVE-2026-60163
  • report
    https://access.redhat.com/security/cve/CVE-2026-60177
  • report
    https://access.redhat.com/security/cve/CVE-2026-60178
  • report
    https://access.redhat.com/security/cve/CVE-2026-60182
  • report
    https://access.redhat.com/security/cve/CVE-2026-60183
  • report
    https://access.redhat.com/security/cve/CVE-2026-60184
  • report
    https://access.redhat.com/security/cve/CVE-2026-60185
  • report
    https://access.redhat.com/security/cve/CVE-2026-60186
  • report
    https://access.redhat.com/security/cve/CVE-2026-60187
  • report
    https://access.redhat.com/security/cve/CVE-2026-60188
  • report
    https://access.redhat.com/security/cve/CVE-2026-60189
  • report
    https://access.redhat.com/security/cve/CVE-2026-60190
  • report
    https://access.redhat.com/security/cve/CVE-2026-60191
  • report
    https://access.redhat.com/security/cve/CVE-2026-60315
  • report
    https://access.redhat.com/security/cve/CVE-2026-60316
  • report
    https://access.redhat.com/security/cve/CVE-2026-60331
  • report
    https://access.redhat.com/security/cve/CVE-2026-60332
  • report
    https://access.redhat.com/security/cve/CVE-2026-60585
  • report
    https://access.redhat.com/security/cve/CVE-2026-60747
  • report
    https://access.redhat.com/security/cve/CVE-2026-61081
  • report
    https://access.redhat.com/security/cve/CVE-2026-61094
  • report
    https://access.redhat.com/security/cve/CVE-2026-61096
  • report
    https://access.redhat.com/security/cve/CVE-2026-61109
  • report
    https://bugzilla.redhat.com/2504779
  • report
    https://bugzilla.redhat.com/2504823
  • report
    https://bugzilla.redhat.com/2504848
  • report
    https://bugzilla.redhat.com/2504855
  • report
    https://bugzilla.redhat.com/2504877
  • report
    https://bugzilla.redhat.com/2504925
  • report
    https://bugzilla.redhat.com/2504940
  • report
    https://bugzilla.redhat.com/2505001
  • report
    https://bugzilla.redhat.com/2505002
  • report
    https://bugzilla.redhat.com/2505027