RLSA-2026:99741

See a problem?
Please try reporting it to the source first.
Source
https://errata.rockylinux.org/RLSA-2026:99741
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2026:99741.json
JSON Data
https://api.osv.dev/v1/vulns/RLSA-2026:99741
Upstream
CVE (66)
  • CVE-2026-101607
  • CVE-2026-101608
  • CVE-2026-101609
  • CVE-2026-101610
  • CVE-2026-101611
  • CVE-2026-101612
  • CVE-2026-101613
  • CVE-2026-101614
  • CVE-2026-101615
  • CVE-2026-101616
  • CVE-2026-101617
  • CVE-2026-101618
  • CVE-2026-101619
  • CVE-2026-101621
  • CVE-2026-101622
  • CVE-2026-101623
  • CVE-2026-101624
  • CVE-2026-101627
  • CVE-2026-101679
  • CVE-2026-101721
  • CVE-2026-101724
  • CVE-2026-101725
  • CVE-2026-101726
  • CVE-2026-101727
  • CVE-2026-101728
  • CVE-2026-101729
  • CVE-2026-101730
  • CVE-2026-101731
  • CVE-2026-101732
  • CVE-2026-101733
  • CVE-2026-101747
  • CVE-2026-101748
  • CVE-2026-101750
  • CVE-2026-101751
  • CVE-2026-101754
  • CVE-2026-101760
  • CVE-2026-101761
  • CVE-2026-101762
  • CVE-2026-101766
  • CVE-2026-101770
  • CVE-2026-101771
  • CVE-2026-101772
  • CVE-2026-101773
  • CVE-2026-101774
  • CVE-2026-101775
  • CVE-2026-101776
  • CVE-2026-101778
  • CVE-2026-101779
  • CVE-2026-101780
  • CVE-2026-101781
  • CVE-2026-101784
  • CVE-2026-101785
  • CVE-2026-101787
  • CVE-2026-101788
  • CVE-2026-101789
  • CVE-2026-101794
  • CVE-2026-101795
  • CVE-2026-101796
  • CVE-2026-101797
  • CVE-2026-101798
  • CVE-2026-101799
  • CVE-2026-101800
  • CVE-2026-101801
  • CVE-2026-101802
  • CVE-2026-101803
  • CVE-2026-116620
Published
2026-11-13T02:54:30Z
Modified
2026-11-13T03:30:02Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Important: mysql:8.4 security update
Details

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • mysql: mysql: system takeover via mysqldump component (CVE-2026-101797)

  • mysql: mysql: unauthorized server takeover (CVE-2026-101772)

  • mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101724)

  • mysql: mysql: Denial of Service via client programs (CVE-2026-101754)

  • mysql: mysql: System takeover via client programs (CVE-2026-101770)

  • mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101732)

  • mysql: mysql: Denial of Service via server optimizer flaw (CVE-2026-101623)

  • mysql: mysql: Denial of Service via the Replication component (CVE-2026-101727)

  • mysql: mysql: Denial of Service via the audit component (CVE-2026-101748)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101747)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101617)

  • mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101607)

  • mysql: mysql: Complete server takeover via replication component (CVE-2026-101796)

  • mysql: mysql: Denial of Service (CVE-2026-101778)

  • mysql: MySQL Server: Denial of service in the Server Optimizer (CVE-2026-101731)

  • mysql: mysql: Denial of Service in Group Replication plugin (CVE-2026-101776)

  • mysql: mysql: Denial of service in InnoDB (CVE-2026-101609)

  • mysql: mysql: Denial of service in InnoDB (CVE-2026-101760)

  • mysql: mysql: unauthorized data modification via replication component (CVE-2026-101775)

  • mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101610)

  • mysql: mysql: Denial of Service via the C API (CVE-2026-101726)

  • mysql: mysql: unauthorized data modification via XML component (CVE-2026-101803)

  • mysql: mysql: Denial of Service in Group Replication (CVE-2026-101751)

  • mysql: mysql: Denial of Service via Server Optimizer flaw (CVE-2026-101787)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101622)

  • mysql: mysql: Denial of Service via the Optimizer component (CVE-2026-101789)

  • mysql: mysql: Denial of service in replication component (CVE-2026-101766)

  • mysql: mysql: Denial of Service in Clone Plugin (CVE-2026-101750)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)

  • mysql: mysql: Denial of Service via the Server Replication component (CVE-2026-101729)

  • mysql: MySQL: Denial of Service via the Group Replication plugin (CVE-2026-101773)

  • mysql: mysql: Denial of Service via security encryption component (CVE-2026-101762)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101611)

  • mysql: mysql: unauthorized data access via improper privilege controls (CVE-2026-101800)

  • mysql: mysql: Partial Denial of Service via Telemetry component (CVE-2026-101779)

  • mysql: mysql: Denial of Service via Group Replication GCS (CVE-2026-101799)

  • mysql: mysql: Denial of service in InnoDB (CVE-2026-101615)

  • mysql: mysql: Denial of Service via the Server Parser (CVE-2026-101802)

  • mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101627)

  • mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101730)

  • mysql: mysql: Denial of Service via JSON component (CVE-2026-101733)

  • mysql: mysql: Denial of Service via the C API component (CVE-2026-101725)

  • mysql: mysql: Denial of Service via security encryption component (CVE-2026-101761)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)

  • mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101608)

  • mysql: mysql: Denial of Service in Server Components Services (CVE-2026-101721)

  • mysql: mysql: Denial of service via DDL component (CVE-2026-101613)

  • mysql: mysql: Denial of Service via multiple protocols (CVE-2026-101679)

  • mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)

  • mysql: mysql: Denial of Service via Server Components Services (CVE-2026-101788)

  • mysql: mysql: Denial of Service via XML component flaw (CVE-2026-101794)

  • mysql: mysql: Denial of Service in Pluggable Auth (CVE-2026-101728)

  • mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101801)

  • mysql: MySQL: Denial of Service via JSON component (CVE-2026-101616)

  • mysql: mysql: complete service takeover via network access (CVE-2026-101771)

  • mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101612)

  • mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101614)

  • mysql: mysql: Complete service compromise by a local privileged attacker (CVE-2026-101795)

  • mysql: mysql: Server takeover via Group Replication GCS (CVE-2026-101781)

  • mysql: mysql: Denial of Service in the server optimizer (CVE-2026-101798)

  • mysql: mysql: Denial of service via InnoDB storage engine (CVE-2026-101624)

  • mysql: mysql: Denial of service via Pluggable Authentication component (CVE-2026-101774)

  • mysql: MySQL: Unauthorized data modification in JSON component (CVE-2026-101785)

  • mysql: mysql: Denial of service in query optimizer (CVE-2026-101784)

  • rapidjson: rapidjson: Denial of Service via out-of-bounds read in regex parser (CVE-2026-116620)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Database specific 
{
    "license": "CC-BY-4.0",
    "license_url": "https://creativecommons.org/licenses/by/4.0/",
    "source_advisory": "RHSA-2026:99741"
}
References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:9
mecab

Package

Name
mecab
Purl
pkg:rpm/rocky-linux/mecab?distro=rocky-linux-9&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:0.996-3.module+el9.8.0+40162+a76274f1.4
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:99741.json"
mecab

Package

Name
mecab
Purl
pkg:rpm/rocky-linux/mecab?distro=rocky-linux-9&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:0.996-3.module+el9.8.0+40205+77f4da59.4
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:99741.json"
mecab-ipadic

Package

Name
mecab-ipadic
Purl
pkg:rpm/rocky-linux/mecab-ipadic?distro=rocky-linux-9&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.7.0.20070801-24.module+el9.8.0+40162+a76274f1
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:99741.json"
mecab-ipadic

Package

Name
mecab-ipadic
Purl
pkg:rpm/rocky-linux/mecab-ipadic?distro=rocky-linux-9&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:2.7.0.20070801-24.module+el9.8.0+40205+77f4da59
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:99741.json"
perl-DBD-MySQL

Package

Name
perl-DBD-MySQL
Purl
pkg:rpm/rocky-linux/perl-DBD-MySQL?distro=rocky-linux-9&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:4.053-3.module+el9.8.0+40205+77f4da59
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:99741.json"
perl-DBD-MySQL

Package

Name
perl-DBD-MySQL
Purl
pkg:rpm/rocky-linux/perl-DBD-MySQL?distro=rocky-linux-9&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0:4.053-3.module+el9.8.0+40162+a76274f1
Database specific
Show details 
{
    "yum_repository": "AppStream"
}

Database specific

source 
"https://storage.googleapis.com/resf-osv-data/RLSA-2026:99741.json"