RLSA-2026:56007

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.

Security Fix(es):

mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081)
mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064)
mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190)
mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177)
mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145)
mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936)
mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186)
mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315)
mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096)
mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163)
mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60184)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60185)
mysql: JSON unspecified vulnerability (CPU Jul 2026) (CVE-2026-61109)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60191)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-61094)
mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60178)
mysql: Group Replication GCS unspecified vulnerability (CPU Jul 2026) (CVE-2026-60332)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60189)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60747)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-47023)
mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60183)
mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60316)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60187)
mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60585)
mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60182)

Bug Fix(es) and Enhancement(s):

[tracker] Rebase MySQL to 8.4.11 (JIRA:Rocky Linux-188044)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Database specific

{
    "license": "CC-BY-4.0",
    "source_advisory": "RHSA-2026:56007",
    "license_url": "https://creativecommons.org/licenses/by/4.0/"
}

References

Credits

- Rocky Enterprise Software Foundation
- Red Hat

Affected packages

Rocky Linux:10 / mysql8.4

Package

Name: mysql8.4
Purl: pkg:rpm/rocky-linux/mysql8.4?distro=rocky-linux-10&epoch=0

Affected ranges

Type

ECOSYSTEM

Events

Introduced

Fixed

0:8.4.11-1.el10_2.rocky.0.1

Database specific

Show details

{
    "yum_repository": "AppStream"
}

Database specific

source

"https://storage.googleapis.com/resf-osv-data/RLSA-2026:56007.json"