rpm package

almalinux/mysql8.4-common

pkg:rpm/almalinux/mysql8.4-common

Vulnerabilities (115)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2026-22017	Med	6.5	< 8.4.9-1.el10_2.alma.1	8.4.9-1.el10_2.alma.1	Apr 21, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2026-22015	Med	4.3	< 8.4.9-1.el10_2.alma.1	8.4.9-1.el10_2.alma.1	Apr 21, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multipl
CVE-2026-22009	Med	6.5	< 8.4.9-1.el10_2.alma.1	8.4.9-1.el10_2.alma.1	Apr 21, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2026-22005	Med	4.9	< 8.4.9-1.el10_2.alma.1	8.4.9-1.el10_2.alma.1	Apr 21, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2026-22004	Med	4.9	< 8.4.9-1.el10_2.alma.1	8.4.9-1.el10_2.alma.1	Apr 21, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2026-22002	Med	4.9	< 8.4.9-1.el10_2.alma.1	8.4.9-1.el10_2.alma.1	Apr 21, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2026-22001	Low	2.7	< 8.4.9-1.el10_2.alma.1	8.4.9-1.el10_2.alma.1	Apr 21, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multip
CVE-2026-21998	Med	4.9	< 8.4.9-1.el10_2.alma.1	8.4.9-1.el10_2.alma.1	Apr 21, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2026-21968	Med	6.5	< 8.4.8-1.el10_1	8.4.8-1.el10_1	Jan 20, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2026-21964	Med	4.9	< 8.4.8-1.el10_1	8.4.8-1.el10_1	Jan 20, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple p
CVE-2026-21948	Med	4.9	< 8.4.8-1.el10_1	8.4.8-1.el10_1	Jan 20, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2026-21941	Med	4.9	< 8.4.8-1.el10_1	8.4.8-1.el10_1	Jan 20, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2026-21937	Med	4.9	< 8.4.8-1.el10_1	8.4.8-1.el10_1	Jan 20, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to
CVE-2026-21936	Med	4.9	< 8.4.8-1.el10_1	8.4.8-1.el10_1	Jan 20, 2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-53069	Med	4.9	< 8.4.7-1.el10_1	8.4.7-1.el10_1	Oct 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multi
CVE-2025-53062	Med	4.9	< 8.4.7-1.el10_1	8.4.7-1.el10_1	Oct 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-53054	Med	5.5	< 8.4.7-1.el10_1	8.4.7-1.el10_1	Oct 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-53053	Med	5.5	< 8.4.7-1.el10_1	8.4.7-1.el10_1	Oct 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to
CVE-2025-53045	Med	4.9	< 8.4.7-1.el10_1	8.4.7-1.el10_1	Oct 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-53044	Med	4.9	< 8.4.7-1.el10_1	8.4.7-1.el10_1	Oct 21, 2025	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp

CVE-2026-22017MedApr 21, 2026
affected < 8.4.9-1.el10_2.alma.1fixed 8.4.9-1.el10_2.alma.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2026-22015MedApr 21, 2026
affected < 8.4.9-1.el10_2.alma.1fixed 8.4.9-1.el10_2.alma.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multipl
CVE-2026-22009MedApr 21, 2026
affected < 8.4.9-1.el10_2.alma.1fixed 8.4.9-1.el10_2.alma.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2026-22005MedApr 21, 2026
affected < 8.4.9-1.el10_2.alma.1fixed 8.4.9-1.el10_2.alma.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2026-22004MedApr 21, 2026
affected < 8.4.9-1.el10_2.alma.1fixed 8.4.9-1.el10_2.alma.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2026-22002MedApr 21, 2026
affected < 8.4.9-1.el10_2.alma.1fixed 8.4.9-1.el10_2.alma.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2026-22001LowApr 21, 2026
affected < 8.4.9-1.el10_2.alma.1fixed 8.4.9-1.el10_2.alma.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multip
CVE-2026-21998MedApr 21, 2026
affected < 8.4.9-1.el10_2.alma.1fixed 8.4.9-1.el10_2.alma.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2026-21968MedJan 20, 2026
affected < 8.4.8-1.el10_1fixed 8.4.8-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco
CVE-2026-21964MedJan 20, 2026
affected < 8.4.8-1.el10_1fixed 8.4.8-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple p
CVE-2026-21948MedJan 20, 2026
affected < 8.4.8-1.el10_1fixed 8.4.8-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2026-21941MedJan 20, 2026
affected < 8.4.8-1.el10_1fixed 8.4.8-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc
CVE-2026-21937MedJan 20, 2026
affected < 8.4.8-1.el10_1fixed 8.4.8-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to
CVE-2026-21936MedJan 20, 2026
affected < 8.4.8-1.el10_1fixed 8.4.8-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-53069MedOct 21, 2025
affected < 8.4.7-1.el10_1fixed 8.4.7-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multi
CVE-2025-53062MedOct 21, 2025
affected < 8.4.7-1.el10_1fixed 8.4.7-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-53054MedOct 21, 2025
affected < 8.4.7-1.el10_1fixed 8.4.7-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-53053MedOct 21, 2025
affected < 8.4.7-1.el10_1fixed 8.4.7-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to
CVE-2025-53045MedOct 21, 2025
affected < 8.4.7-1.el10_1fixed 8.4.7-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp
CVE-2025-53044MedOct 21, 2025
affected < 8.4.7-1.el10_1fixed 8.4.7-1.el10_1
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp

Page 3 of 6