Red Hat Security Advisory

RHSA-2026:23332

mysql security update

Released 2026-06-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) mysql-8.0.46-1.el9_8, mysql-common-8.0.46-1.el9_8, mysql-errmsg-8.0.46-1.el9_8 +2
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) mysql-devel-8.0.46-1.el9_8, mysql-test-8.0.46-1.el9_8

Fixes 22 records

TI-2026-26593 CVE-2026-34304 · GHSA-g74q-22gc-6974

Uncontrolled resource consumption in Oracle MySQL Server

MEDIUM 56

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-04-21 Fixed CWE-400

TI-2026-26597 CVE-2026-34308 · GHSA-rwvq-ffmg-g3q5

Uncontrolled resource consumption in Oracle MySQL Server

LOW 29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00303 Published 2026-04-21 Fixed CWE-400

TI-2026-26592 CVE-2026-34303 · GHSA-565v-jcgw-g7vh

Uncontrolled resource consumption in Oracle MySQL Server

LOW 29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00303 Published 2026-04-21 Fixed CWE-400

TI-2026-26565 CVE-2026-34276 · GHSA-mwrp-hhpc-x64f

Uncontrolled resource consumption in Oracle MySQL Server

LOW 29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00303 Published 2026-04-21 Fixed CWE-400

TI-2026-26560 CVE-2026-34271 · GHSA-8hfr-pcm2-774v

Uncontrolled resource consumption in Oracle MySQL Server

LOW 29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00303 Published 2026-04-21 Fixed CWE-400

TI-2026-26559 CVE-2026-34270 · GHSA-7642-f8gh-qxjj

Uncontrolled resource consumption in Oracle MySQL Server

LOW 29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00303 Published 2026-04-21 Partial fix CWE-400

TI-2026-17712 CVE-2026-22017 · GHSA-3f4r-x789-hx5r

Uncontrolled resource consumption in Oracle MySQL Server

LOW 29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00303 Published 2026-04-21 Fixed CWE-400

TI-2026-17705 CVE-2026-22009 · GHSA-f2mm-qgp8-rc9q

Uncontrolled resource consumption in Oracle MySQL Server

LOW 29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00303 Published 2026-04-21 Fixed CWE-400

TI-2026-27392 CVE-2026-35240 · GHSA-wj59-76w3-4fv9

Improper access control in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00242 Published 2026-04-21 Fixed CWE-284

TI-2026-27391 CVE-2026-35239 · GHSA-9v46-qvxf-wrwq

Improper access control in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00242 Published 2026-04-21 Fixed CWE-284

TI-2026-27390 CVE-2026-35238 · GHSA-c2pf-f8x2-95m2

Improper access control in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00242 Published 2026-04-21 Fixed CWE-284

TI-2026-27389 CVE-2026-35237 · GHSA-93m8-r373-2q8w

Improper access control in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00242 Published 2026-04-21 Fixed CWE-284

TI-2026-27388 CVE-2026-35236 · GHSA-cv52-82gr-h293

Improper access control in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00242 Published 2026-04-21 Fixed CWE-284

TI-2026-26582 CVE-2026-34293 · GHSA-42m9-g5m6-v663

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-04-21 Partial fix CWE-400

TI-2026-26567 CVE-2026-34278 · GHSA-fh86-xhc3-24gr

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-04-21 Partial fix CWE-400

TI-2026-26556 CVE-2026-34267 · GHSA-3gfg-g579-3wmq

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-04-21 Partial fix CWE-400

TI-2026-17701 CVE-2026-22005 · GHSA-8833-3jph-2h9h

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-04-21 Fixed CWE-400

TI-2026-17700 CVE-2026-22004 · GHSA-cccj-xpm5-2hpx

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-04-21 Fixed CWE-400

TI-2026-17698 CVE-2026-22002 · GHSA-4h9j-w885-pqx6

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-04-21 Fixed CWE-400

TI-2026-17695 CVE-2026-21998 · GHSA-x878-48g9-62p4

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-04-21 Fixed CWE-400

TI-2026-17710 CVE-2026-22015 · GHSA-wcjc-hfgv-f5wc

Information disclosure in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00243 Published 2026-04-21 Fixed CWE-200

TI-2026-17697 CVE-2026-22001 · GHSA-xcgr-x2r4-j9mj

Information disclosure in Oracle MySQL Server

LOW 13

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00259 Published 2026-04-21 Fixed CWE-200