{"id":"ALSA-2026:56973","summary":"Important: mysql:8.4 security, bug fix, and enhancement update","details":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.  \n\nSecurity Fix(es):  \n\n  * mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190)\n  * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177)\n  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145)\n  * mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936)\n  * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186)\n  * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315)\n  * mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096)\n  * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163)\n  * mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60184)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60185)\n  * mysql: JSON unspecified vulnerability (CPU Jul 2026) (CVE-2026-61109)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60191)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-61094)\n  * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60178)\n  * mysql: Group Replication GCS unspecified vulnerability (CPU Jul 2026) (CVE-2026-60332)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60189)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60747)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-47023)\n  * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60183)\n  * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60316)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60187)\n  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60585)\n  * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60182)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [tracker] Rebase MySQL to 8.4.11 (JIRA:AlmaLinux-188045)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-09-01T12:55:50.910385629Z","published":"2026-08-19T00:00:00Z","related":["CVE-2026-46936","CVE-2026-47012","CVE-2026-47023","CVE-2026-47052","CVE-2026-47064","CVE-2026-60145","CVE-2026-60163","CVE-2026-60177","CVE-2026-60178","CVE-2026-60182","CVE-2026-60183","CVE-2026-60184","CVE-2026-60185","CVE-2026-60186","CVE-2026-60187","CVE-2026-60188","CVE-2026-60189","CVE-2026-60190","CVE-2026-60191","CVE-2026-60315","CVE-2026-60316","CVE-2026-60331","CVE-2026-60332","CVE-2026-60585","CVE-2026-60747","CVE-2026-61081","CVE-2026-61094","CVE-2026-61096","CVE-2026-61109"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:56973"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-46936"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47012"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47023"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47052"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47064"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60145"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60163"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60177"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60178"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60182"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60183"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60184"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60185"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60186"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60187"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60188"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60189"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60190"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60191"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60315"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60316"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60331"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60332"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60585"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60747"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-61081"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-61094"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-61096"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-61109"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2504779"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2504823"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2504848"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2504855"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2504877"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2504925"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2504940"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505001"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505002"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505027"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505182"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505200"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505215"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505259"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505262"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505300"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505310"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505319"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505509"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505594"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505643"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505699"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505711"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505722"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505844"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505868"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505891"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505923"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2505927"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-56973.html"}],"affected":[{"package":{"name":"mecab","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mecab"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.996-3.module_el9.6.0+152+8cbce00c.4"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mecab-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mecab-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.996-3.module_el9.6.0+152+8cbce00c.4"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mecab-ipadic","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mecab-ipadic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0.20070801-24.module_el9.6.0+152+8cbce00c"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mecab-ipadic-EUCJP","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mecab-ipadic-EUCJP"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0.20070801-24.module_el9.6.0+152+8cbce00c"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mysql","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mysql"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.11-1.module_el9.8.0+295+1681b9df"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mysql-common","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mysql-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.11-1.module_el9.8.0+295+1681b9df"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mysql-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mysql-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.11-1.module_el9.8.0+295+1681b9df"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mysql-errmsg","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mysql-errmsg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.11-1.module_el9.8.0+295+1681b9df"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mysql-libs","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mysql-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.11-1.module_el9.8.0+295+1681b9df"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mysql-server","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mysql-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.11-1.module_el9.8.0+295+1681b9df"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mysql-test","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mysql-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.11-1.module_el9.8.0+295+1681b9df"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"mysql-test-data","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/mysql-test-data"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.11-1.module_el9.8.0+295+1681b9df"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"perl-DBD-MySQL","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/perl-DBD-MySQL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.053-3.module_el9.8.0+235+a38ba90c"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"rapidjson-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/rapidjson-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-19.module_el9.6.0+152+8cbce00c"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}},{"package":{"name":"rapidjson-doc","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/rapidjson-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-19.module_el9.6.0+152+8cbce00c"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:56973.json"}}],"schema_version":"1.9.0"}