Skip to content
OpenAdvisories
Medium ALSA-2026:6391 6 CVEs

Moderate: mysql:8.4 security update

Published Apr 1, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
* mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
* mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
* mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 14

ReleasePackageFixed in
AlmaLinux · 8 mecab 0.996-2.module_el8.10.0+4060+d4256e26
AlmaLinux · 8 mecab-devel 0.996-2.module_el8.10.0+4060+d4256e26
AlmaLinux · 8 mecab-ipadic 2.7.0.20070801-17.module_el8.10.0+4060+d4256e26
AlmaLinux · 8 mecab-ipadic 2.7.0.20070801-17.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mecab-ipadic-EUCJP 2.7.0.20070801-17.module_el8.10.0+4060+d4256e26
AlmaLinux · 8 mecab-ipadic-EUCJP 2.7.0.20070801-17.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mysql 8.4.8-1.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mysql-common 8.4.8-1.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mysql-devel 8.4.8-1.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mysql-errmsg 8.4.8-1.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mysql-libs 8.4.8-1.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mysql-server 8.4.8-1.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mysql-test 8.4.8-1.module_el8.10.0+4154+a69a9128
AlmaLinux · 8 mysql-test-data 8.4.8-1.module_el8.10.0+4154+a69a9128

Vulnerabilities 6

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-21936
  • report
    https://access.redhat.com/security/cve/CVE-2026-21937
  • report
    https://access.redhat.com/security/cve/CVE-2026-21941
  • report
    https://access.redhat.com/security/cve/CVE-2026-21948
  • report
    https://access.redhat.com/security/cve/CVE-2026-21964
  • report
    https://access.redhat.com/security/cve/CVE-2026-21968
  • report
    https://bugzilla.redhat.com/2431384
  • report
    https://bugzilla.redhat.com/2431385
  • report
    https://bugzilla.redhat.com/2431402
  • report
    https://bugzilla.redhat.com/2431409
  • report
    https://bugzilla.redhat.com/2431413
  • report
    https://bugzilla.redhat.com/2431431
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-6391.html