Red Hat Security Advisory

RHSA-2026:56973

mysql:8.4 security, bug fix, and enhancement update

Released 2026-08-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) mecab-0.996-3.module+el9.8.0+24348+9b27f387.4.aarch64::mysql:8.4, mecab-0.996-3.module+el9.8.0+24348+9b27f387.4.ppc64le::mysql:8.4, mecab-0.996-3.module+el9.8.0+24348+9b27f387.4.s390x::mysql:8.4 +47

Fixes 29 records

TI-2026-43016 CVE-2026-60315 · GHSA-47wc-32xv-3x4v

Information disclosure in Oracle MySQL Server

MEDIUM 42

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00436 Published 2026-07-21 Fixed CWE-200

TI-2026-42864 CVE-2026-60163 · GHSA-r8hj-8qqf-f8wc

Improper access control in Oracle MySQL Server

LOW 38

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00193 Published 2026-07-21 Fixed CWE-284

TI-2026-43738 CVE-2026-61094 · GHSA-gj2w-2vrw-8hw2

Improper privilege management in Oracle MySQL Server

LOW 34

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 Fixed CWE-269

TI-2026-43017 CVE-2026-60316 · GHSA-569j-46cc-m4j3

Improper access control in Oracle MySQL Server

LOW 34

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 Fixed CWE-284

TI-2026-43250 CVE-2026-60585 · GHSA-5wmq-h5x7-m9vv

Improper access control in Oracle MySQL Server

LOW 31

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.0036 Published 2026-07-21 Partial fix CWE-284

TI-2026-42879 CVE-2026-60178 · GHSA-j25j-8q48-6xw7

Improper access control in Oracle MySQL Server

LOW 31

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin).

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00375 Published 2026-07-21 Fixed CWE-284

TI-2026-43032 CVE-2026-60331 · GHSA-9h9h-6f2c-xmhc

Improper access control in Oracle MySQL Server

LOW 30

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00197 Published 2026-07-21 Partial fix CWE-284

TI-2026-43753 CVE-2026-61109 · GHSA-72pw-r4f3-922c

Uncontrolled resource consumption in Oracle MySQL Server

LOW 29

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00422 Published 2026-07-21 Fixed CWE-400

TI-2026-43033 CVE-2026-60332 · GHSA-43wq-jr44-wphj

Improper access control in Oracle MySQL Server

LOW 29

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS).

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00146 Published 2026-07-21 Fixed CWE-284

TI-2026-42884 CVE-2026-60183 · GHSA-vvw5-63v6-mjmw

Improper privilege management in Oracle MySQL Server

LOW 29

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin).

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00146 Published 2026-07-21 Fixed CWE-269

TI-2026-34666 CVE-2026-47064 · GHSA-vf2j-rrr9-c6jq

Improper access control in Oracle MySQL Server

LOW 28

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00266 Published 2026-07-21 Fixed CWE-284

TI-2026-43407 CVE-2026-60747 · GHSA-4xr7-8qqf-4gj7

Uncontrolled resource consumption in Oracle MySQL Server

LOW 27

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00194 Published 2026-07-21 Partial fix CWE-400

TI-2026-42848 CVE-2026-60145 · GHSA-r62r-4vf9-gc43

Improper access control in Oracle MySQL Server

LOW 23

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00416 Published 2026-07-21 Fixed CWE-284

TI-2026-34654 CVE-2026-47052 · GHSA-gjg8-ggw8-pg6h

Uncontrolled resource consumption in Oracle MySQL Server

LOW 23

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0045 Published 2026-07-21 Fixed CWE-400

TI-2026-34628 CVE-2026-47023 · GHSA-7hrr-qm54-fxvq

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00323 Published 2026-07-21 Partial fix CWE-400

TI-2026-42890 CVE-2026-60189 · GHSA-mprr-478p-9vpc

Improper access control in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00332 Published 2026-07-21 Fixed CWE-284

TI-2026-42889 CVE-2026-60188 · GHSA-cpr6-wv9j-3qvg

Improper access control in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00332 Published 2026-07-21 Fixed CWE-284

TI-2026-42888 CVE-2026-60187 · GHSA-pcvf-6mq8-j65f

Uncontrolled resource consumption in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00359 Published 2026-07-21 Fixed CWE-400

TI-2026-42887 CVE-2026-60186 · GHSA-6w6f-84v7-62w3

Uncontrolled resource consumption in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00359 Published 2026-07-21 Fixed CWE-400

TI-2026-42886 CVE-2026-60185 · GHSA-h992-7wpf-2vx7

Uncontrolled resource consumption in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00359 Published 2026-07-21 Fixed CWE-400

TI-2026-42885 CVE-2026-60184 · GHSA-pwwg-58j6-8xxj

Uncontrolled resource consumption in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00353 Published 2026-07-21 Partial fix CWE-400

TI-2026-42883 CVE-2026-60182 · GHSA-3m89-h57j-cqmr

Uncontrolled resource consumption in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00359 Published 2026-07-21 Fixed CWE-400

TI-2026-42878 CVE-2026-60177 · GHSA-hmxm-xx78-7639

Uncontrolled resource consumption in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00359 Published 2026-07-21 Fixed CWE-400

TI-2026-34618 CVE-2026-47012 · GHSA-hg2w-fhgp-x8r7

Uncontrolled resource consumption in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00359 Published 2026-07-21 Fixed CWE-400

TI-2026-34542 CVE-2026-46936 · GHSA-7535-7fg5-3c9x

Improper access control in Oracle MySQL Server

LOW 20

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00332 Published 2026-07-21 Fixed CWE-284

TI-2026-42892 CVE-2026-60191 · GHSA-4mj7-v3mq-c9q2

Improper access control in Oracle MySQL Server

LOW 18

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1MEDIUM 4.1 Local High privileges No interaction EPSS 0.00131 Published 2026-07-21 Fixed CWE-284

TI-2026-43740 CVE-2026-61096 · GHSA-xvhh-x8q7-xrxj

Improper access control in Oracle MySQL Server

LOW 13

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth).

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00135 Published 2026-07-21 Fixed CWE-284

TI-2026-43725 CVE-2026-61081 · GHSA-jqr3-jfj2-492m

Information disclosure in Oracle MySQL Server

LOW 13

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema).

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00259 Published 2026-07-21 Partial fix CWE-200

TI-2026-42891 CVE-2026-60190 · GHSA-q5cr-vm72-r4h9

Improper access control in Oracle MySQL Server

LOW 11

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).

CVSS 3.1LOW 2.2 Network High privileges No interaction EPSS 0.00297 Published 2026-07-21 Fixed CWE-284