Skip to content
OpenAdvisories
Medium RLSA-2026:4162 6 CVEs

Moderate: mysql8.4 security update

Published May 21, 2026 · Updated May 21, 2026

Ecosystem: Rocky Linux

Summary

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.

Security Fix(es):

* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)

* mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)

* mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

* mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)

* mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 mysql8.4 0:8.4.8-1.el10_1.rocky.0.1

Vulnerabilities 6

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2431413
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2431385
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2431431
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2431402
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2431409
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2431384